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(54) CRYPTOGRAPHIC EQUIPMENT 

(5 7)Ab street: 

PROBLEM TO BE SOLVED: To provide a cryptographic equipment provided with a 
small scale cryptographic IC and having a required minimum function to ensure 
security for inter-equipment communication. 

SOLUTION: A 1st cryptographic IC 54 in a 1st equipment 51 combines a random 
number R3 generated in the process (steps 1, 3. 6, 7) to verify a 2nd equipment 52 
with a random number RR4 acquired in the process (steps 2, 4, 5, 8) to prove its own 
validity to the 2nd equipment 52 so as to generate a time changing data transfer key 
(step 9) are digital literary works are cryptographer by using the data transfer key and 
the cryptographic data are transferred to the 2nd equipment 52 (step 1 1 ). 
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CLAIMS 



[Claim(s)] 

[Claim 1] A 1st random-number generation means to be encryption equipment with 
which the device which performs shareHzing of a data transfer key and 
cryptocommunication using the data transfer key is equipped, and to generate the 1st 
random number for share-izing of said data transfer key, A 1st random-number 
maintenance means to hold the 1st random number generated by said 1st random- 
number generation means, A 1st transmitting means to transmit the 1st random 
number generated by said 1st random-number generation means to the phase hand- 
loom machine of said cryptocommunication, the 1st random number held at said 1st 
random-number maintenance means — using — the time — said strange data 
transfer key — generating — data transfer — a key — generation — a means — It 
has a transfer data encryption means to encipher using said data transfer key to the 
transfer data set as the object of cryptocommunication. Said 1 st random-number 
generation means, said 1st random-number maintenance means, said data transfer 
key generation means, and said transfer data encryption means It is encryption 
equipment which is realized in the circuit in one IC and characterized by said 1st 
random-number maintenance means holding said 1st random number to the field 
which cannot be accessed from the outside of said IC. 

[Claim 2] It is encryption equipment according to claim 1 which said encryption 
equipment is equipped with a 1st encryption means encipher further the 1st random 




number generated by said 1 st random-number generation means, and said 1 st 
encryption means is realized in the circuit in said IC, and is characterized by for said 
1st transmitting means to transmit the 1st random number enciphered with said 1st 
encryption means to said phase hand-loom machine. 

[Claim 3] Said device is what said phase hand-loom machine attests mutually that it 
is a just device with by the communication link based on the Challenge Handshake 
Authentication Protocol of a challenge response mold. A 2nd random-number 
generation means by which said encryption equipment generates further the 2nd 
random number for challenge data transmitted to said phase hand-loom machine, It 
judges whether the response data answered from said phase hand-loom machine to 
said challenge data and said 2nd random number are in agreement. It is encryption 
equipment according to claim 2 which is equipped with an authentication means to 
attest with said phase hand-loom machine being a just device when in agreement, and 
is characterized by said data transfer key generation means generating said data 
transfer key when said authentication is made. 

[Claim 4] Said 2nd random-number generation means and said authentication means 
are encryption equipment according to claim 3 characterized by realizing in the circuit 
besides said IC. 

[Claim 5] A decryption means by which said encryption equipment decrypts the 
enciphered joint data which have been sent from said phase hand-loom machine 
further, A separation means to divide the decrypted joint data into the 1st separation 
data equivalent to response data, and the 2nd separation data which remain. It has a 
2nd transmitting means to answer said phase hand-loom machine in said 1 st 
separation data. Said 1st encryption means Said 1st random number and said 2nd 
random number are combined, and the joint data obtained as a result are enciphered. 
Said data transfer key generation means By combining said 1 st random number and 
said 2nd separation data, it is encryption equipment according to claim 4 which 
generates said data transfer key and is characterized by realizing said decryption 
means and said separation means in the circuit in said IC. 

[Claim 6] A 2nd transmitting means for said encryption equipment to use said 2nd 
random number as challenge data further, and to transmit to said phase hand-loom 
machine, A decryption means to decrypt the enciphered joint data which have been 
sent from said phase hand-loom machine, It has a separation means to divide the 
decrypted joint data into the 1st separation data equivalent to response data, and the 
2nd separation data which remain. Said authentication means Said decision and 
authentication are carried out as response data answered from said phase hand-loom 
machine in said 1st separation data. Said 1st encryption means The challenge data 
transmitted from said phase hand-loom machine and said 1st random number are 
combined, and the joint data obtained as a result are enciphered. Said data transfer 
key generation means By combining said 1st random number and said 2nd separation 
data, it is encryption equipment according to claim 4 which generates said data 




transfer key and is characterized by realizing said decryption means and said 
separation means in the circuit in said IC. 

[Claim 7] The algorithm of encryption by said transfer data encryption means is 
encryption equipment according to claim 5 or 6 characterized by being the same as 
that of at least one thing of said 1st encryption means and said decryption means. 
[Claim 8] The algorithm of encryption by said transfer data encryption means is 
encryption equipment according to claim 5 or 6 which differs from anything of said 1 st 
encryption means and said decryption means, and is characterized by being simpler 
than which thing. 

[Claim 9] Said transfer data encryption means is encryption equipment according to 
claim 8 characterized by enciphering said transfer data using the part to which said 
data transfer key corresponds to the block of fixed length to a break and each block. 
[Claim 10] Said transfer data encryption means is encryption equipment according to 
claim 9 characterized by performing said encryption by taking the exclusive OR of 
said block and part to which said data transfer key corresponds. 

[Claim 1 1] The code in said 1st encryption means and a decryption with said 
decryption means are encryption equipment according to claim 10 characterized by 
being the same conversion algorithm. 

[Claim 12] It is encryption equipment according to claim 1 1 characterized by for said 
1st encryption means and said decryption means performing said encryption and 
decryption using the key data beforehand held in said IC, storing a part of the key 
data in the mask-ROM field in said IC, and storing the part which remains in the 
postscript ROM field in said IC. 

[Claim 13] Said device is what said phase hand-loom machine attests mutually that it 
is a just device with by the communication link based on the Challenge Handshake 
Authentication Protocol of a challenge response mold. A decryption means by which 
said encryption equipment decrypts the enciphered Joint data which have been sent 
from said phase hand-loom machine to said challenge data further, A separation 
means to divide the decrypted joint data into the 1st separation data equivalent to 
response data, and the 2nd separation data which remain. An authentication means to 
judge whether said 1st random number and said 1st separation data are in agreement, 
and to attest with said phase hand-loom machine being a just device when in 
agreement, A 2nd encryption means to encipher said 2nd separation data when said 
authentication is made. It has a 2nd transmitting means to answer said phase hand- 
loom machine by using said enciphered 2nd separation data as response data. Said 
data transfer key generation means By combining said 1st random number and said 
2nd separation data, it is encryption equipment according to claim 2 which generates 
said data transfer key and is characterized by realizing said decryption means, said 
separation means, and said 2nd encryption means in the circuit in said IC. 

[Claim 14] The algorithm of encryption by said transfer data encryption means is 
encryption equipment according to claim 13 characterized by being the same as that 




of at least one thing of said 1st encryption means, said 2nd encryption means, and 
said decryption means. 

[Claim 1 5] The algorithm of encryption by said transfer data encryption means is 
encryption equipment according to claim 13 which differs from anything of said 1st 
encryption means, said 2nd encryption means, and said decryption means, and is 
characterized by being simpler than which thing. 

[Claim 1 6] Said transfer data encryption means is encryption equipment according to 
claim 1 5 characterized by enciphering said transfer data using the part to which said 
data transfer key corresponds to the block of fixed length to a break and each block. 
[Claim 1 7] Said transfer data encryption means is encryption equipment according to 
claim 16 characterized by performing said encryption by taking the exclusive OR of 
said block and part to which said data transfer key corresponds. 

[Claim 18] Each of encryption with said 1st encryption means and said 2nd encryption 
means and decryptions with said decryption means is encryption equipment according 
to claim 1 7 characterized by being the same conversion algorithm. 

[Claim 19] It is encryption equipment according to claim 18 characterized by for said 
1st encryption means, said 2nd encryption means, and said decryption means 
performing said encryption and decryption using the key data beforehand held in said 
IC, storing a part of the key data in the mask-ROM field in said IC, and storing the 
part which remains in the postscript ROM field in said IC. 

[Claim 20] It is the communication system which consists of the transmitters and 
receivers which perform share-izing of a data transfer key, and cryptocommunication 
using the data transfer key. These transmitters and a receiver A 1st random-number 
generation means to attest mutually that a phase hand-loom machine is a just device 
by the communication link based on the Challenge Handshake Authentication Protocol 
of a challenge response mold, and to generate the 1st random number for challenge 
data, respectively, A 2nd random-number generation means to generate the 2nd 
random number for said data transfer keys, and the coupling means which combines 
said 1st random number and said 2nd random number. An encryption means to 
encipher said joint data, and a 1st transmitting means to transmit said enciphered 
joint data to said phase hand-loom machine, A 1st receiving means to receive the 
enciphered joint data which were transmitted from the 1st transmitting means of said 
phase hand-loom machine, A separation means to divide a decryption means to 
decrypt said received joint data, and said decrypted joint data into the 1st separation 
data equivalent to response data, and the 2nd separation data for said data transfer 
keys, A 2nd transmitting means to answer said phase hand-loom machine by using 
said 1 st separation data as response data, A 2nd receiving means to receive the 1 st 
separation data answered from the 2nd transmitting means of said phase hand-loom 
machine. By combining a comparison means to compare with said 1st random number 
said 1 st separation data to which it received, and to attest said phase hand-loom 
machine with a just device when in agreement, and said 2nd random number and said 




2nd separation data Encryption equipment characterized by having a 
cryptocommunication means to perform said phase hand-loom machine and 
cryptocommunication using a data transfer key generation means to generate said 
data transfer key, and said data transfer key generated when said authentication was 
made. 

[Claim 21] It is the communication system which consists of the transmitters and 
receivers which perform share-izing of a data transfer key, and cryptocommunication 
using the data transfer key. These transmitters and a receiver A 1 st random-number 
generation means to attest mutually that a phase hand-loom machine is a just device 
by the communication link based on the Challenge Handshake Authentication Protocol 
of a challenge response mold, and to generate the 1st random number for challenge 
data, respectively, A 1st transmitting means to transmit said 1st random number to 
said phase hand-loom machine, and a 1st receiving means to receive the 1st random 
number transmitted from the 1st transmitting means of said phase hand-loom 
machine, A 2nd random-number generation means to generate the 2nd random 
number for said data transfer keys, and the coupling means which combines said 1st 
received random number and said 2nd random number. An encryption means to 
encipher said Joint data, and a 2nd transmitting means to answer said phase hand- 
loom machine in said enciphered joint data, A 2nd receiving means to receive the 
encryption joint data transmitted from the 2nd transmitting means of said phase 
hand-loom machine, A separation means to divide a decryption means to decrypt said 
received joint data, and said decrypted joint data into the 1st separation data 
equivalent to response data, and the 2nd separation data for said data transfer keys. 
By combining a comparison means to compare said 1st separation data with said 1st 
random number generated with said 1st random-number generation means, and to 
attest said phase hand-loom machine with a just device when in agreement, and said 
2nd random number and said 2nd separation data Encryption equipment characterized 
by having a cryptocommunication means to perform said phase hand-loom machine 
and cryptocommunication using a data transfer key generation means to generate 
said data transfer key, and said data transfer key generated when said authentication 
was made. 

[Claim 22] It is the communication system which consists of the transmitters and 
receivers which perform share-izing of a data transfer key, and cryptocommunication 
using the data transfer key. These transmitters and a receiver It is what attests 
mutually that a phase hand-loom machine is a just device by the communication link 
based on the Challenge Handshake Authentication Protocol of a challenge response 
mold. Said transmitter It has a 1st random-number generation means to generate the 
1st random number, a 1st encryption means to encipher said 1st random number, and 
a 1st transmitting means to transmit said 1st enciphered random number to a 
receiver. Said receiver By combining said 1st random number and said 2nd random 
number with a 1st receiving means to receive said 1st enciphered random number, a 




1st decryption means to decrypt said 1st received random number, and a 2nd 
random-number generation means to generate the 2nd random number The 1 st 
coupling means which generates joint data, and a 2nd encryption means to encipher 
said Joint data, A 2nd receiving means by which have a 2nd transmitting means to 
transmit said enciphered joint data to a transmitter, and said transmitter receives said 
enciphered joint data further, A separation means to divide a 2nd decryption means to 
decrypt said received joint data, and said decrypted joint data into the 1st separation 
data equivalent to said 1 st random number, and the 2nd separation data equivalent to 
said 2nd random number, A 1st comparison means to compare said 1st random 
number and said 1st separation data, and to attest said receiver with a just device 
when in agreement, A 3rd encryption means to encipher said 2nd separation data 
when said authentication is made. By combining the 1st random number of an account 
generated with a 3rd transmitting means to transmit said enciphered 2nd separation 
data to said receiver, and said 1st random-number generation means, and the 2nd 
separation data obtained with said separation means A 3rd receiving means by which 
have a 1st data transfer key generation means to generate said data transfer key, and 
said receiver receives said enciphered 2nd separation data further, A 2nd comparison 
means to compare a 3rd decryption means to decrypt said received 2nd separation 
data with said 2nd separation data, with which it was decrypted and said 2nd random 
number, and to attest said transmitter with a just device when in agreement. By 
combining said 1st random number obtained with said 1st decryption means, and the 
2nd random number generated with said 2nd random-number generation means, when 
said authentication is made A 4th encryption means by which have a 2nd data 
transfer key generation means to generate said data transfer key, and said 
transmitter enciphers transfer data further using the data transfer key generated with 
said 1 st data transfer key generation means, A 4th receiving means by which have a 
4th transmitting means to transmit the enciphered transfer data to said receiver, and 
said receiver receives said enciphered transfer data from said transmitter further. 
Encryption equipment characterized by having a 4th decryption means to decrypt 
transfer data using the data transfer key generated with said 2nd data transfer key 
generation means. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 

[ 0001 ] 

[Field of the Invention] This invention relates to encryption equipment especially 
realizable on a scale of a small circuit about the encryption equipment with which the 




communication equipment which shares a private key and performs 
cryptocommunication is equipped. 

[ 0002 ] 

[Description of the Prior Art] The data which are communicating through the channel 
are unjustly copied on a channel, or there are many cases where it is necessary to 
prevent being changed. For example, it is a case so that works, such as a film, are 
digitized, an information compression is carried out further, digital recording is further 
carried out on the optical disk, this is taken out as electric information with an optical 
disk regenerative apparatus, it may be elongated by information expanding equipment 
and the taken-out digital information may be reproduced by the image sound system. 
[0003] If this commo data is recorded by the digital information recording apparatus 
without an author’s permission and is further reproduced by digital information 
duplicate equipment when an optical disk regenerative apparatus and information 
expanding equipment are separated as a separate device and data communication of 
the meantime is carried out by the digital communication way, the work of that film 
will be reproduced unjustly and disturbance of copyright will take place here. 
Therefore, the data which are communicating through the channel must prevent being 
unjustly copied on a channel. To generally neither the circuit in a device nor the 
specification of components being exhibited, since electrical characteristics and the 
signal format for data communication are generally exhibited in many cases, they 
become the problem that the alteration of the data which follow the illegal copy of 
data and it in a channel is big. 

[0004] More various things than before are known about the technique for eliminating 
such a malfeasance and securing a safe communication link. The most typical thing 
uses a partner authentication technique. Only when this attests fundamentally the 
justification of the side which the side which sends out data receives and it is able to 
check that he is a just addressee, it is transmitting data, and a digital work prevents 
being received by the inaccurate device. 

[0005] In addition, the side which checks a partner’s justification for the side which 
proves its justification like the addressee in this case like a testifier, a call, and the 
transmitting person in this case is called an authentication person. Moreover, in a 
case like the device in connection with the above-mentioned optical disk record 
playback, whether these devices are based on the specification defined according to 
the industry of an optical disk related equipment poses a problem from whether 
authentication is successful between specific devices. Therefore, in such a case, 
justification"^ means "being based on predetermined specification." 

(The 1st conventional technique) As 1st concrete conventional technique, there is 
the one direction authentication approach using the code technique indicated by the 
International Standards ISO/IEC 9798-2. 

[0006] This authentication approach is based on proving to an authentication person 
that a testifier has data of the secrecy called an authentication key, without telling 




that key itself. Therefore, the data which have an authentication person first are 
chosen and this is thrown to a testifier. The data which challenged and threw this act 
are called challenge data. On the other hand, a testifier enciphers said challenge data 
using the code conversion and the authentication key which were owned beforehand. 
And the enciphered data are returned to an authentication person. A response is 
called for this act and response data are called for that data. 

[0007] The authentication person who received this response data is sharing the 
decode conversion and the authentication key which are inverse transformation of the 
code conversion which the testifier owns, and decrypts the response data answered 
by the testifier using that authentication key and decode conversion. If this result is 
in agreement with said challenge data, an addressee will judge it as a thing with the 
authentication key of normal, and will attest a testifier’s justification. One direction 
authentication means that one side proves the justification on another side. 

[0008] Here, the code conversion T is the map to the cipher set from a plaintext set 
which becomes settled with the key data S. It is a cipher when a plaintext is set to X. 
It is written as T (S, X). The relation of TINV(S, T (S, X)) = X between the inverse 
transformation TINV which is the maps to the plaintext set from a cipher set which 
becomes settled with the same key data S is. It means that it will return if this carries 
out code conversion of the plaintext X and this is transformed inversely. The inverse 
transformation of code conversion is called decode conversion. In order to be code 
conversion, when there is no information of Key S, it is required for it to be difficult to 
ask for Plaintext X from Cipher T (S, X). In addition, code conversion is described as 
E (S, ), and a practice describes decode conversion D (S, ). 

[0009] Drawing 1 1 is drawing showing an example of the authentication approach 
indicated by said specification. The case where the digital work mj is transmitted is 
shown to the 2nd device 12 from the 1st device 1 1 by drawing 1 1 . Here, the 1st 
device 1 1 checks the justification of the 2nd device 12. Actuation of this conventional 
one direction authentication approach is explained according to the step number 
shown in this drawing below. 

[0010] (1) The 1st device 1 1 generates a random number R1. And it transmits to the 
2nd device 12 through a channel by making this into challenge data. 

(2) The 2nd device 12 will encipher this random number by making into a 
cryptographic key the authentication key S of the secrecy stored in the 2nd device 
12, if this random number is received. And as a result, it transmits to the 1st device 
1 1 through a channel by using Cl as response data. 

[0011] (3) The 1st device 11 will decrypt this response data Cl by using as a decode 
key the authentication key S stored in the 1st device 11, if this response data is 
received. 

(4) The 1st device 11 compares RR1 with the random number R1 stored temporarily 
in the 1st device 1 1 as a result of decode. If this is in agreement, the 1st device 1 1 
will think that the 2nd device 12 device holds the same authentication key S, and will 




attest with a communications partner being just. On the other hand, if not in 
agreement, a communications partner Judges it as that which is not just, and 
interrupts processing. 

[0012] (5) The 1st device 1 1 transmits a digital work to the 2nd device 12 through a 
channel, after attesting the 2nd device 12 with a just thing. When the 3rd device 
which does not have the authentication key S instead of the 2nd device 1 2 is 
connected to the channel Since the 3rd device cannot create the data Cl of a right 
value at the above-mentioned step (2) and its RR1 does not correspond with said R1 
at a step (3) as a result as a result of decode, in a step (4), as for the 1st device 1 1, a 
digital work is not transmitted to the 3rd device. 

[0013] In addition, if the same challenge data and response data are always used 
between the 1st device 1 1 and the 2nd device 12, it is possible that the 3rd 
inaccurate device which got to know that turns into the 2nd device 12, and it clears 
up. In order to avoid this, from the 1st device 11, challenge data (random number) 
different each time are sent. 

It is also possible to send out unjustly the data of the falsehood memorized by the 
hard disk drive unit after authentication with the conventional technique of the above 
1st in (the 2nd conventional technique) and time to the 2nd device 12 which has the 
authentication key of normal, for example. It is necessary to check the justification of 
the 1st device 1 1 also for the 2nd device 12 at the same time the 1st device 1 1 
checks the justification of the 2nd device 12, in order to solve this problem. 

[0014] Moreover, it is possible to extract the data on this channel to the midst which 
is transmitting the digital work to the 2nd device 12 through a channel after both 
devices attest, and to memorize this to it at a hard disk drive unit. Although for that 
information, such as the electrical characteristics of the signal on a channel and data 
format, is required, of course, since especially those information is not the information 
generally made into secrecy, sampling of that digital work is fully technically possible. 
Therefore, just authentication is inadequate, and after authentication is successful, 
the new key generated at random is shared between each device, and it is necessary 
to carry out cryptocommunication which enciphers and transmits a digital work using 
the key. In addition, the private key for enciphering data which should be transmitted, 
such as a digital work, is hereafter called a "data transfer key.” 

[0015] The one direction authentication which is the conventional technique of the 
above 1st is extended hereafter, and the 2nd conventional technique which performs 
bidirectional authentication, share-izing of a data transfer key, and 
cryptocommunication is explained. Drawing 12 shows an example of equipment which 
realizes this bidirectional authentication. The case where it transmits to drawing 12 
after enciphering the digital work mj from the 1st device 21 to the 2nd device 22 is 
shown. 

[0016] This conventional bidirectional authentication and actuation of share-izing of a 
data transfer key are explained according to the step number shown in this drawing 




below. 

(1) The 1st device 21 generates a random number R1. This has the semantics as 1st 
challenge data. And this is transmitted to the 2nd device 22 through a channel. A 
random number R2 has the semantics as 2nd challenge data from the 2nd device 22 
to the 1st device 21 here. That is, a cipher Cl has the semantics of both response 
data and the 2nd challenge data to the 1st challenge data. 

[0017] (2) The 2nd device 22 generates a random number R2, and create joint data 
R1||R2 by combining the random number R1 received from it and the 1st device 21. It 
is shown that notation" ||" puts both data in order in the direction of a digit, and Joins 
together here. And these Joint data R1||R2 are enciphered by making the 
authentication key S of the 2nd device 22 into a cryptographic key, and that cipher 
Cl is transmitted to the 1st device 21. 

[0018] (3) The 1st device 21 decrypts the authentication key S for the cipher Cl 
received from the 2nd device 22 as a decode key, and use the high order of the result 
as the separation data RR1 , and it uses low order as the separation data RR2. 

(4) The 1st device 21 compares this separation data RR1 with the random number R1 
stored temporarily to the 1st device 21. If this is in agreement, a communications 
partner will attest with it being a Just device with the authentication key S. If not in 
agreement, authentication processing is interrupted here. 

[0019] (5) The 1st device 21 generates a random number K, and sets this up as a 
data transfer key K. And Joint data RR2||K which combined said gained separation 
data RR2 and this data transfer key K is enciphered with the authentication key S of 
the 1st device 21, and that cipher C2 is transmitted to the 2nd device 22. 

(6) The 2nd device 22 decrypts the cipher C2 received from the 1st device 21 using 
the authentication key S, and use the high order as the separation data RRR2, and it 
uses low order as the separation data KK. 

[0020] (7) The 2nd device 22 compares this separation data RRR2 with the random 
number R2 stored temporarily to the 2nd device 22. If this is in agreement, a 
communications partner will attest with it being a Just device with the authentication 
key S. If not in agreement, authentication processing is interrupted here. On the other 
hand, decrypted KK separation data is set up as a data transfer key KK. 

[0021] (8) The 1st device 21 enciphers a digital work using said data transfer key K, 
and transmits it to the 2nd device 22 through a channel. 

(9) By the 2nd device 22, decrypt this using KK said data transfer key, and gain the 
digital work of a basis. Here, when the 1st device 21 has the authentication key S of 
normal and the 2nd device 22 does not have the authentication key of normal, the 1st 
device 21 is Judged to be that in which the communications partner does not have the 
authentication key of normal at a step (4), and authentication processing can be 
interrupted. Moreover, the 1st device 21 does not have the authentication key of 
normal, but when it has the authentication key of normal, in a step (7), the 2nd device 
22 Judges the 2nd device 22 to be that in which the communications partner does not 




have the authentication key of normal, and can interrupt authentication processing. 
Thus, while a digital work prevents flowing into an inaccurate device, flowing into a 
just device from an inaccurate device can also be prevented. 

[0022] Furthermore, when it has the authentication key also with Just 1st device 21 
and 2nd device 22, and said authentication processing is completed and the digital 
work is transmitted in the channel top in the step (8) Since the digital work is 
enciphered even if it is the case where the digital work was copied electrically and 
accumulated in digital are recording equipment, it is meaningless digital data and the 
original digital work is protected effectively. 

[0023] As mentioned above, in order to perform bidirectional authentication using a 
code technique with the sufficient result, it becomes indispensable conditions that 
what is going to perform injustice does not understand easily the authentication key 
stored in the interior of the 1st device 21 and the 2nd device 22. Moreover, it is 
required that neither the generation section of the random number for challenge data 
nor the generation section of the data transfer key K can access from the exterior 
and to be unable to change. 

[0024] The most effective method of securing the secrecy nature of these 
components is an approach of realizing as an IC the part which performs the above- 
mentioned authentication, share-izing of a data transfer key, and 
cryptocommunication. It is because a great effort is generally applied to analyzing IC, 
so an authentication key etc. is not decoded easily. 

[0025] 

[Problem(s) to be Solved by the Invention] However, in order to realize the 1st device 
21 in the above-mentioned 2nd conventional technique by IC, such an IC (henceforth 
Encryption IC") needs to have the following part. 

- Combine the random-number generation section and the separation data RR2 for 
generating the comparator and the data transfer key K for comparing the part and the 
random number R1, and the separation data RR1 which store the decode section and 
the authentication key S for decrypting the random-number generation section and 
the cipher Cl which generates a random number R1, and the data transfer key K. The 
hardware of magnitude comparable as this also about the 2nd device 22 of a 
cryptopart which enciphers a digital work using the part and the data transfer key K 
which stores the cryptopart and the data transfer key K for enciphering is required. 
[0026] thus, having realized the above-mentioned conventional authentication method 
by IC if — the two random-number generation sections and two converters (the 
decode section and cryptopart) — since it must have very many functions, circuit 
magnitude becomes large and it has the trouble of leading to the cost rise of a device 
after all. Moreover, it is more desirable for this key to reflect the value which both 
devices generated for the reason same although the 1st device 21 is generating the 
data transfer key K for enciphering data with the above-mentioned 2nd conventional 
technique as mutual recognition being needed. 




[0027] As explained above, in order to protect the circuit between devices, the 
approach of confining the information on functions, such as authentication, or the 
secrecy for it in IC, and realizing is effective. However, in the conventional approach, 
by realizing all of the part of mutual recognition, the part of share-izing of a data 
transfer key, and the part of data encryption by one IC, the magnitude of the IC 
becomes very large and leads to a cost rise. 

[0028] Then, this invention is equipped with the small encryption IC of magnitude, and 
sets it as the 1 st object to offer the encryption equipment which has a necessary 
minimum function for securing the safety of the communication link between devices. 
Encryption IC has the following function here. 

(1) Store an authentication key in insurance. As for the key, rewriting and read-out 
are not made by access from the outside. 

[0029] (2) Share a data transfer key safely. As for the key, rewriting and read-out are 
not made by access from the outside. 

(3) However, make magnitude of Encryption IC into min by not equipping Encryption 
IC with the part irrelevant to the safety of communication system. Moreover, the 2nd 
object of this invention is offering a cryptocommunication system with high safety 
suitable realizing using the small encryption IC of magnitude. 

[0030] 

[Means for Solving the Problem] In order to attain the 1st object of the above, this 
invention is encryption equipment with which the device which performs share-izing 
of a data transfer key and cryptocommunication which used the data transfer key is 
equipped. A 1 st random-number generation means to generate the 1 st random 
number for share-izing of said data transfer key, A 1st random-number maintenance 
means to hold the 1st random number generated by said 1st random-number 
generation means, A 1st transmitting means to transmit the 1st random number 
generated by said 1st random-number generation means to the phase hand-loom 
machine of said cryptocommunication, the 1st random number held at said 1st 
random-number maintenance means — using — the time — said strange data 
transfer key — generating — data transfer — a key — generation — a means ~ It 
has a transfer data encryption means to encipher using said data transfer key to the 
transfer data set as the object of cryptocommunication. Said 1st random-number 
generation means, said 1st random-number maintenance means, said data transfer 
key generation means, and said transfer data encryption means are realized in the 
circuit in one IC, and said 1st random-number maintenance means is characterized by 
holding said 1st random number to the field which cannot be accessed from the 
outside of said IC. 

[0031] since the 1st random number relevant to generation of a data transfer key is 
directly held by this inside [ which cannot be accessed from the outside ] Encryption 
IC the time a strange data transfer key — each device — insurance — sharing 
having cryptocommunication — carrying out — having . Moreover, since 




Encryption IC has a necessary minimum function for securing the safety of the 
communication link between devices, it is realizable in a small circuit. 

[0032] In order to attain the 2nd object of the above moreover, this invention It is the 
communication system which consists of the transmitters and receivers which 
perform share-izing of a data transfer key, and cryptocommunication using the data 
transfer key. These transmitters and a receiver A 1st random-number generation 
means to attest mutually that a phase hand-loom machine is a just device by the 
communication link based on the Challenge Handshake Authentication Protocol of a 
challenge response mold, and to generate the 1st random number for challenge data, 
respectively, A 2nd random-number generation means to generate the 2nd random 
number for said data transfer keys, and the coupling means which combines said 1st 
random number and said 2nd random number. An encryption means to encipher said 
joint data, and a 1st transmitting means to transmit said enciphered joint data to said 
phase hand-loom machine. A 1st receiving means to receive the enciphered joint data 
which were transmitted from the 1st transmitting means of said phase hand-loom 
machine, A separation means to divide a decryption means to decrypt said received 
joint data, and said decrypted joint data into the 1st separation data equivalent to 
response data, and the 2nd separation data for said data transfer keys, A 2nd 
transmitting means to answer said phase hand-loom machine by using said 1st 
separation data as response data, A 2nd receiving means to receive the 1 st 
separation data answered from the 2nd transmitting means of said phase hand-loom 
machine. By combining a comparison means to compare with said 1st random number 
said 1st separation data to which it received, and to attest said phase hand-loom 
machine with a just device when in agreement, and said 2nd random number and said 
2nd separation data It is characterized by having a cryptocommunication means to 
perform said phase hand-loom machine and cryptocommunication using a data 
transfer key generation means to generate said data transfer key, and said data 
transfer key generated when said authentication was made. 

[0033] A cryptocommunication system with high safety is directly realized by two 
random numbers relevant to not being transmitted and received if the random number 
relevant to generation of that a data transfer key is generated while mutual 
recognition is performed between a transmitter and a receiver by this, and a data 
transfer key remains as it is directly, and generation of a data transfer key suitable to 
realize using the small encryption IC of magnitude, since it is provided from a 
transmitter and a receiver, respectively. 

[0034] 

[Embodiment of the Invention] 

(Gestalt 1 of operation) Drawing 1 is drawing showing the processing sequence in the 
gestalt 1 of the operation which performs mutual recognition, share-izing of a data 
transfer key, and cryptocommunication of data between the 1 st device equipped with 
the encryption equipment concerning this invention, and the 2nd device. 




[0035] The case where the digital work mj is transmitted is shown to the 2nd device 
52 from the 1st device 51 by drawing 1 . In addition, only the encryption equipment 
with which each devices 51 and 52 are equipped is shown in drawing 1 , and other 
components (the transceiver section, processor of a digital work, etc.) irrelevant to 
encryption equipment and direct are omitted. The encryption equipment concerning 
this invention with which the 1st device 51 was equipped is roughly divided, and 
consists of MPU53 and the 1st encryption IC 54. 

[0036] MPU53 becomes this encryption equipment from ROM holding the control 
program of a proper, the general-purpose microprocessor which performs that control 
program, RAM, etc., and performs processing (the step in drawing (1), (7)) which does 
not participate in share-ization of a data transfer key directly. The 1st encryption IC 
54 is the semiconductor IC of one chip, and performs processing (the step in drawing 
(3), (5), (9), (11)) which participates in share-ization of a data transfer key directly. 
[0037] The encryption equipment which similarly is applied to this invention with 
which the 2nd device 52 was equipped is also roughly divided, and consists of MPU55 
and the 2nd encryption IC 56. MPU55 becomes this encryption equipment from RCM 
holding the control program of a proper, the general-purpose microprocessor which 
performs that control program, RAM, etc., and performs processing (the step in 
drawing (2), (8)) which does not participate in share-ization of a data transfer key 
directly. 

[0038] The 2nd encryption IC 56 is the semiconductor IC of one chip, and performs 
processing (the step in drawing (4), (6), (10), (12)) which participates in share-ization 
of a data transfer key directly. In addition, in the gestalt of this operation, 64 bit-block 
cryptographic algorithm E based on a Data Encryption Standard (DES:Data 
EncryptionStandard) and its inverse transformation algorithm D are used. Henceforth, 
encryption ' and the conversion using the inverse transformation algorithm D of the 
conversion which uses cryptographic algorithm E are called "a decryption." 

[0039] Moreover, the 1 st encryption IC 54 is equipped only with cryptographic 
algorithm E, and the 2nd encryption IC 56 is equipped with the inverse transformation 
algorithm D. This is for reducing the magnitude of each encryption 54 and ICs 56, and 
safety. Hereafter, according to the step number shown in drawing 1 , actuation of the 
encryption equipment in the gestalt 1 of operation is explained. 

[0040] (1) While generating and memorizing a random number R1 (32 bits) in MPU53 
of the 1st device 51, pass the 1st encryption IC 54. 

(2) Like a step (1), while generating and memorizing a random number R2 (32 bits) in 
MPU55 of the 2nd device 52, transmit to the 2nd encryption IC 56. 

[0041] (3) Store in the field which cannot access a random number R3 (32 bits) from 
generation and the exterior in the 1st encryption IC 54. And the random number R1 
generated by said MPU and said random number R3 are combined, and it enciphers 
with E function. Here, it is shown that notation" ||" combines two random numbers in 
the direction of a digit, and considers as 64 bits (it is 32 bits of low order about 32 




bits of high orders and a random number R3 in a random number R1). Moreover, the 
authentication key S of the secrecy currently beforehand held in common by the 1st 
encryption IC 54 and the 2nd encryption IC 56 is used for encryption. The 1st 
encryption 1C 54 transmits the above-mentioned code result Cl to the 2nd device 52 
through the transmitting section (not shown by a diagram) of the 1st device 51. 

[0042] (4) Like a step (3), in the 2nd encryption IC 56, generate a random number R4 
(32 bits), and store in the field which cannot be accessed from the exterior. The 
random number R2 generated by said MPU and said random number R4 are combined, 
and it decrypts with the inverse transformation algorithm D. Said authentication key S 
is used for decode. The 2nd encryption IC 56 transmits the decode result C2 (64 bits) 
to the 1st device 51 through the transmitting section (not shown by a diagram) of the 
2nd device 52. 

[0043] (5) Encipher the decode sentence C2 which received from said 2nd device 52 
with said authentication key S in the 1st encryption IC 54 using said E function. And 
obtained 64 bits are divided into the separation data RR2 which are 32 bits of the high 
order, and the separation data RR4 which are 32 bits of low order. Furthermore, it 
transmits to the 2nd device 52 through the transmitting section of the 1st device 51, 
and, on the other hand, the separation data RR2 store the separation data RR4 in the 
field which cannot be accessed from the outside in the 1st encryption IC 54, without 
taking out outside. 

[0044] In addition, the 1 st encryption IC 54 and the 2nd encryption IC 56 are mutually 
regular, and when the same authentication key S is held, in accordance with the 
random number R2 which MPU55 of said 2nd device 52 generated, said separation 
data RR4 of said separation data RR2 correspond with the random number R4 which 
said 2nd encryption IC 56 stores in the interior. 

(6) Decrypt the cipher Cl received from said 1st encryption 1C 54 with said 
authentication key S in the 2nd encryption IC 56 like a step (5) using said inverse 
transformation algorithm D. And obtained 64 bits are divided into the separation data 
RR1 which are 32 bits of the high order, and the separation data RR3 which are 32 
bits of low order. Furthermore, it transmits to the 1st device 51 through the 
transmitting section of the 2nd device 52, and, on the other hand, the separation data 
RR1 store the separation data RR3 in the field which cannot be accessed from the 
outside in the 2nd encryption 1C 56, without taking out outside. 

[0045] In addition, the 1st encryption IC 54 and the 2nd encryption IC 56 are mutually 
regular, and when the same authentication key S is held, in accordance with said 
random number R1, said separation data RR3 of said separation data RR1 correspond 
with said random number R3. 

(7) Compare the random number R1 memorized at said step (1) in MPU53 of the 1st 
device 51 with the separation data RR1 received from said 2nd device 52, and when in 
agreement, attest the 2nd device 52 equipped with the 2nd encryption IC 56 and it 
with a just device. 




[0046] (8) Compare the random number R2 memorized at said step (2) in MPU55 of 
the 2nd device 52 with the separation data RR2 received from said 2nd device 52 like 
a step (7), and when in agreement, attest the 1st device 51 equipped with the 1st 
encryption IC 54 and it with a just device. 

(9) Create the data transfer key K in the 1st encryption IC 54 by combining the 
random number R3 memorized at said step (3), and said separation data RR4. Here, 
the data transfer key K (64 bits) which makes a random number R3 32 bits of a high 
order, and makes the separation data RR4 32 bits of low order is generated, in 
addition — since this data transfer key K is association of two random numbers — 
the time — queerness, i.e., the key newly generated at random, — it can say . 

[0047] (10) Generate the data transfer key K by combining the random number R4 
memorized at said separation data RR3 and said step (4) in the 2nd encryption IC 56 
like a step (9). Here, the data transfer key K (64 bits) which makes the random 
number R4 which memorized the above-mentioned separation data RR3 at 32 bits of 
a high order and the above-mentioned step (4) 32 bits of low order is generated, this 
data transfer key — the time — a strange key — it is . 

[0048] in addition, when mutual authentication at a step (7) and a step (8) is 
successful Since the random number R3 generated at the step (3) and the separation 
data RR3 obtained at the step (6) will be in agreement and the random number R4 
generated at the step (4) and the separation data RRR4 obtained at the step (5) will 
be in agreement consequent — a step (9) and a step (10) — the data transfer key K 
which comes out, respectively and is generated will be in agreement. 

[0049] (11) In the 1st encryption IC 54 of the 1st device 51, repeat until it finishes 
transmitting all the digital works that should transmit the processing which enciphers 
the blocked digital work mj (64 bits) which is sent from MPU53 using the data transfer 
key K obtained at the above-mentioned step (9), and transmits the acquired cipher Cj 
to the 2nd device 52. 

[0050] (12) Receive the enciphered above-mentioned digital work CJ (64 bits) which 
the 1st device 51 transmitted in the 2nd encryption IC 56 of the 2nd device 52 
corresponding to a step (11), decrypt using the data transfer key K obtained at the 
above-mentioned step (10), and send the obtained digital work mmj to MPU55. This 
decryption is repeated as long as the above-mentioned digital work Cj is transmitted 
from the 1st device 51. 

[0051] Thus, mutual recognition, share-izing of the data transfer key K, and 
cryptocommunication of data are performed by the encryption equipment of the 
gestalt 1 of operation between the 1st device 51 and the 2nd device 52. The 
encryption equipment of the gestalt 1 of the above-mentioned implementation has 
the following descriptions so that clearly from the above explanation. 

[0052] The 1 st description is that the data transfer key K is protected by insurance 
inside Encryption IC. If it is encryption equipment with which the 1st device 51 is 
equipped, in order to generate the data transfer key K, specifically, two data used 




directly, i.e., a random number R3 and the separation data RR4, will fulfill the following 
conditions. 

- The random number R3 is held to the field which it is generated inside the 1st 
encryption IC 54, and is not outputted outside, and cannot be read from the outside. 
[0053] - The separation data RR4 are held to the field which it is generated inside the 
1 st encryption IC 54 (separation generation), and is not outputted outside, and cannot 
be read from the outside. Since the data transfer key K is protected in Encryption IC 
by these things, even if it adopts what is exhibited as cryptographic algorithm E and 
an inverse transformation algorithm D by them, the safety of the 
cryptocommunication between the 1st device 51 and the 2nd device 52 is guaranteed. 
[0054] The circuit where the 2nd description is dedicated in Encryption IC is stopped 
by the necessary minimum thing. If it is encryption equipment with which the 1 st 
device 51 is equipped, specifically, the following processings are realized by the circuit 
53 besides the 1st encryption IC 54, i.e., MPU. 

- It is considered so that the comparison with generation and the random number R1 
of a random number R1, and the separation data RR1, i.e., the circuit magnitude of the 
1 st encryption IC 54, may not become large superfluously. These two processings are 
not participating in generation of the data transfer key K directly about authentication 
of a phase hand-loom machine. Therefore, even if it is going to carry out injustice 
using these processings being realized out of IC. **** Lycium chinense will be 
impossible in injustice which brings a profit to the 1st device 51. In addition, creation 
of the response data RR2 to the challenge data C2 from the 2nd device 52 is 
performed within Encryption IC. 

[0055] Drawing 2 is the block diagram showing the hardware configuration of the 1 st 
encryption IC 54. The 2nd encryption IC 56 is realizable on a scale of comparable 
hardware. The external I/F section 61 is the only input/output port for accessing the 
internal circuitry of this 1st encryption IC 54 from the outside. The random-number 
generation section 60 generates the 32-bit random number R3. 

[0056] The random-number storing section 62 is a store circuit holding the random 
number R3 generated in the random-number generation section 60. A bond part 63 
makes the random number R3 stored in the random-number storing section 62 32 bits 
of low order, and combines the 32-bit data R1 inputted through the external I/F 
section 61 as 32 bits of high orders. 

[0057] The authentication key S storing section 64 is a store circuit holding the 
authentication key S given beforehand. Switches 65 and 66 are the 3 input 1 output 
multiplexer of 64-bit width of face, and the 2 input 1 output multiplexer of 64-bit 
width of face, respectively. The E function 67 is an encryption circuit based on 
cryptographic algorithm E. A switch 68 is the 1 input 3 output demultiplexer of 64-bit 
width of face. 

[0058] The separation section 69 divides into RR4 64 bit data outputted from the 
switch 68 32 bit RR2 and 32 bits of low order of high orders. The data transfer key K 




generation section 59 makes the random number R3 stored in the random-number 
storing section 62 32 bits of high orders, is combining the separation data RR4 
separated in the separation section 69 as 32 bits of low order, and generates the data 
transfer key K. 

[0059] The data transfer key K storing section 70 is a store circuit holding the data 
transfer key K generated in the data transfer key K generation section 59. Next, it is 
shown how it operates in each step each component shown in this drawing 2 was 
indicated to be to drawing 1 . In the step (3) of drawing 1 , the random-number 
generation section 60 generates a random number R3, stores it in the random-number 
storing section 62, and a bond part 63 combines the random number R3 and the 
random number R1 inputted through the external I/F section 61, and it sends it to the 
E function 67 through a switch 65. The E function 67 enciphers joint data R1||R3 
outputted from the bond part 63 using reception and it through the switch 66 in the 
authentication key S from the authentication key S storing section 64, and, as a result, 
outputs Cl to the 2nd device 52 through a switch 68 and the external I/F section 61. 
[0060] In the step (5) of drawing 1 , and (9), the decode sentence C2 inputted through 
the external I/F section 61 is inputted into E function through a switch 65. The E 
function 67 enciphers the decode sentence C2 for the authentication key S storing 
section 64 to the authentication key S using reception and it, and sends it to the 
separation section 69 through a switch 68. The separation section 69 divides it into 
the separation data RR2 and the separation data RR4, and the separation data RR2 
are outputted outside through the external I/F section 61, and it sends the separation 
data RR4 to the data transfer key K generation section 59. After the data transfer 
key K generation section 59 generates the data transfer key K by combining the 
random number R3 stored in the random-number storing section 62, and the 
separation data RR4 sent from the separation section 69, it is stored in the data 
transfer key K storing section 70. 

[0061] In the step (1 1) of drawing 1 , it enciphers using the data transfer key K in 
which the digital work mj inputted through the external I/F section 61 and a switch 65 
was stored by the data transfer key K storing section 70, and, as a result, the E 
function 67 outputs CJ to the 2nd device 52 through a switch 68 and the external I/F 
section 61. In addition, with the gestalt 1 of operation, although concrete bit length 
and data configurations, such as a random number and a cipher, were shown, this 
invention is not limited to them. For example, in the above-mentioned step (5), the 
32-bit random numbers R1 and R2 are combined, it considers as 64 bits, this is 
inputted into the 64-bit code function E, and the 64-bit cipher Cl is searched for. 

This part is good also as a method which generates the 128-bit cipher Cl by making 
for example, each random number into 64 bits, and repeating encryption by the code 
function E twice. However, it is required for the part about a random number R1 and 
the part about R2 to be easily unseparable from a cipher Cl in this case. There is the 
approach of the code accompanied by a chain like the CBC mode as one of the 




approach of the. About the CBC mode, it is detailed to p70 in Shin-ichi Ikeno and 
Kenji Koyama collaboration "present age code theoretical" lECE 1 986. 

[0062] moreover — although hardware magnitude is reduced with the gestalt 1 of 
operation when the 1st encryption IC 54 is equipped with the code function E and the 
2nd encryption IC 56 is equipped with the inverse function D — that — the very thing 
is not the essence of this invention, as mentioned above. That is, it is a matter to 
determine in relation with the circuit magnitude permitted by these encryption 54 and 
ICs 56, the class of encryption algorithm, etc., for example, each may own both 
cryptographic algorithm E and the inverse transformation algorithm D, and the inverse 
transformation algorithm D may be used for the informational decode to which 
cryptographic algorithm E was sent by encryption of a random number from the phase 
hand-loom machine. This invention is because the description is in the point of having 
secured the safety of secret communication by ICHzing the component in connection 
with generation of the data transfer key K directly at least. 

[0063] Moreover, in the gestalt 1 of operation, the random number R1 in a step (1) 
may be generated within the 1st encryption IC 54. By this, possibility of using the 1st 
encryption IC 54 as a decryptor can be abolished, and it can consider as safer 
encryption equipment. That is, with the gestalt 1 of operation, a random number R1 is 
generated in the exterior of the 1st encryption IC 54, and the 1st encryption IC 54 
outputs a cipher Cl based on this random number R1. Although this cipher Cl is 
influenced of the random number R3 generated inside the 1 st encryption IC 54, when 
a random number R3 is not a value random enough, it will become possible to abuse 
the 1st encryption IC 54 as a decryptor. Therefore, by generating a random number 
R1 within the 1st encryption IC 54, the possibility of the attack described above 
disappears and this encryption equipment will become safer. 

(Gestalt 2 of operation) Next, the gestalt 2 of operation is shown as a modification of 
the step in the gestalt 1 of operation shown in drawing 1 . The object and 
effectiveness are the same as the gestalt 1 of operation. Moreover, it is comparable 
as the gestalt 1 of operation shown in drawing 2 also as hardware magnitude. With the 
gestalt 1 of operation, response data were enciphered and it communicated without 
enciphering challenge data, but with the gestalt 2 of operation, it communicates 
without enciphering challenge data and enciphering response data. It explains focusing 
on the point which is different from the gestalt 1 of operation. 

[0064] Drawing 3 is drawing showing the processing sequence in the gestalt 2 of the 
operation which performs mutual recognition, share-izing of a data transfer key, and 
cryptocommunication of data between the 1st device 71 equipped with the encryption 
equipment concerning this invention, and the 2nd device 72. The case where the 
digital work mj is transmitted is shown to the 2nd device 72 from the 1st device 71 by 
drawing 3 . 

[0065] MPU73, the 1st encryption IC74 and MPU75, and the 2nd encryption IC 76 
correspond to MPU53 in the gestalt 1 of operation, the 1st encryption IC54 and 




MPU55, and the 2nd encryption IC 56, and are the same as that of the case of the 
gestalt 1 of operation about a hardware configuration except for a difference of 
procedure. Hereafter, according to the step number shown in drawing 3 , actuation of 
the encryption equipment in the gestalt 2 of operation is explained. 

[0066] (1) While generating and memorizing a random number R1 (32 bits) in MPU73 
of the 1st device 71, transmit to the 2nd device 72 through the transmitting section 
(not shown by a diagram) of the 1st device 71. This is passed to the 2nd encryption 
IC 76 by the 2nd device 72. 

(2) Like a step (1), while generating and memorizing a random number R2 (32 bits) in 
MPU75 of the 2nd device 72, transmit to the 1st device 71 through the transmitting 
section (not shown by a diagram) of the 2nd device 72. This is passed to the 1 st 
encryption IC 74 by the 1st device 71. 

[0067] (3) In the 1 st encryption IC 74, generate a random number R3 (32 bits), and 
store in the field which cannot be accessed from the exterior. The random number R2 
received from said 2nd device 72 and said random number R3 are combined, and it 
enciphers with E function. The authentication key S of the secrecy currently 
beforehand held in common by the 1st encryption IC 74 and the 2nd encryption IC 76 
is used for encryption. The 1st encryption IC 74 transmits the encryption result Cl 
(64 bits) to the 2nd device 72. 

[0068] (4) Like a step (3), in the 2nd encryption IC 76, generate a random number R4 
(32 bits), and store in the field which cannot be accessed from the exterior. The 
random number R1 received from said 1st device 71 and said random number R4 are 
combined, and it decrypts with the inverse transformation algorithm D. Said 
authentication key S is used for decode. The 2nd encryption IC 76 transmits the 
decode result C2 (64 bits) to the 1st device 71. 

[0069] (5) Encipher the decode sentence C2 which received from said 2nd encryption 
IC 76 with said authentication key S in the 1st encryption IC 74 using said E function. 
Among 64 bit data of the result, let 32 bits of high orders as the separation data RR1 , 
and let 32 bits of low order be the separation data RR4. And the separation data RR1 
store in MPU73 of the 1 st device 71 to delivery and the field which cannot be 
accessed from the outside in the 1st encryption IC 74 on the other hand, without 
taking out the separation data RR4 outside. 

[0070] In addition, the 1st and 2nd encryption IC 76 is mutually regular, when the 
same authentication key S is held, said separation data RR1 become the same as the 
random number R1 which MPU73 of said 1st device 71 generated, and said separation 
data RR4 become the same as the random number R4 which the 2nd encryption IC 76 
generated. 

(6) Decrypt the cipher Cl received from said 1st encryption IC 74 with said 
authentication key S in the 2nd encryption IC 76 like a step (6) using said inverse 
transformation algorithm D. Let 32 bits of high orders of 64 bit data of the result as 
the separation data RR2, and let 32 bits of low order be the separation data RR3. And 




the separation data RR2 store in MPU75 of the 2nd device 72 to delivery and the field 
which cannot be accessed from the outside in the 2nd encryption IC 76 on the other 
hand, without taking out the separation data RR3 outside. 

[0071] In addition, the 1st and 2nd encryption IC 76 is mutually regular, when the 
same authentication key S is held, said separation data RR2 become the same as the 
random number R2 which MPU75 of said 2nd device 72 generated, and said 
separation data RR3 become the same as the random number R3 which the 1 st 
encryption IC 74 generated. 

(7) When the separation data RR1 received from said R1 memorized and 1st [ said ] 
encryption IC 74 in MPU73 of the 1st device 71 are compared and it is in agreement, 
attest the 2nd device 72 by which the 2nd encryption IC 76 and the 2nd encryption IC 
76 were included with a just device. 

[0072] (8) When the separation data RR2 received from said R2 memorized and 2nd 
[ said ] encryption IC 76 in MPU75 of the 2nd device 72 are compared like a step (8) 
and it is in agreement, attest the 1st device 71 by which the 1st encryption IC 74 and 
the 1st encryption IC 74 were included with a Just device. 

(9) Create the data transfer key K using said random number R3 and said separation 
data RR4 within the 1 st encryption IC 74. By a diagram, both association is used as 
the data transfer key K (64 bits). 

[0073] (10) Create the data transfer key K like the 1st encryption IC 74 like a step 

(10) using said separation data RR3 and said random number R4 within the 2nd 
encryption IC 76. By a diagram, both association is used as the data transfer key K 
(64 bits). 

(1 1) In the 1st encryption IC 74 of the 1st device 71, repeat until it finishes 
transmitting all the digital works that should transmit the processing which enciphers 
the blocked digital work mj (64 bits) which is sent from MPU73 using the data transfer 
key K obtained at the above-mentioned step (9), and transmits the acquired cipher CJ 
to the 2nd device 72. 

[0074] (12) Receive the enciphered above-mentioned digital work Cj (64 bits) which 
the 1st device 71 transmitted in the 2nd encryption IC 76 of the 2nd device 72 
corresponding to a step (1 1), decrypt using the data transfer key K obtained at the 
above-mentioned step (10), and send the obtained digital work mmj to MPU75. This 
decryption is repeated as long as the above-mentioned digital work Cj is transmitted 
from the 1st devioe 71. 

[0075] Thus, mutual recognition, shareHzing of the data transfer key K, and 
cryptocommunication of data are performed by the encryption equipment of the 
gestalt 2 of operation between the 1st device 71 and the 2nd device 72 like the case 
of the gestalt 1 of operation. In addition, as mentioned above, the encryption 
equipment of the gestalt of this operation and the thing of the gestalt 1 of operation 
are in agreement in a hardware configuration, and procedure, i.e., connection of each 
hardware configuration element, only differs from an execution sequence. Therefore, 




about the description and its modification of the encryption equipment of this 
operation gestalt, it can say that it is the same as that of the case of the gestalt 1 of 
operation. 

(Gestalt 3 of operation) There are the following common features in the encryption 
equipment of the gestalten 1 and 2 of the above operation. 

(1) In both devices, two random numbers are generated, respectively, one of these is 
used for authentication, and other one side is used for generation of the data transfer 
key K. 

(2) The random number used for generation of the data transfer key K is not 
outputted to the exterior of Encryption IC in a form as it is, and, on the other hand, 
the random number used for authentication is outputted and opened to the exterior of 
Encryption IC. 

[0076] On the other hand, the encryption equipment of the gestalt 3 of operation 
explained below generates only one random number, and uses it for the object of both 
the object for authentication, and for generation of a data transfer key. This is for 
mitigating the burden of random-number generation within Encryption IC compared 
with the gestalten 1 and 2 of operation. Moreover, in the interior of Encryption IC, the 
random-number generation and comparison processing for authentication are 
performed. That is, it is different from the gestalten 1 and 2 of operation, and carries 
out by the internal circuitry of Encryption IC not only including generation of a data 
transfer key but including authentication processing. As mentioned above, this is for 
coping with improper use of using for decryption of Encryption IC, and can raise the 
safety of cryptocommunication. 

[0077] Drawing 4 is drawing showing the processing sequence in the gestalt 3 of the 
operation which performs mutual recognition, share-izing of a data transfer key, and 
cryptocommunication of data between the 1st device 71 equipped with the encryption 
equipment concerning this invention, and the 2nd device 72. The case where the 
digital work mj is transmitted is shown to the 2nd device 82 from the 1st device 81 by 
drawing 4 . 

[0078] In addition, also in the gestalt of this operation, the encryption equipment 
applied to this invention with which each devices 81 and 82 were equipped like the 
gestalten 1 and 2 of operation is roughly divided, and consists of MPU 83 and 85 and 
encryption 84 and ICs 86. However, since MPU 83 and 85 achieves only the function 
to pass the digital work mj to encryption 84 and ICs 86, it can be said that the 
encryption equipment concerning this invention consists of encryption 84 and ICs 86 
substantially. 

[0079] The 1 st encryption IC 84 and the 2nd encryption IC 86 are the semiconductor 
ICs of one chip like the gestalten 1 and 2 of a fruit. Hereafter, according to the step 
number shown in drawing 4 , actuation of the encryption equipment in the gestalt 3 of 
operation is explained. 

(1) While generating and memorizing a random number R1 in the 1st encryption IC 84, 




encipher this with E function and transmit a cipher C1 to the 2nd device 82 through 
the transmitting section (not shown by a diagram) of the 1st device 81. The 2nd 
encryption IC 86 and the authentication key S of the secrecy currently held in 
common beforehand are used for encryption. The received cipher Cl is passed to the 
2nd encryption IC 86 by the 2nd device 82. 

[0080] (2) In the 2nd encryption IC 86, decrypt the received cipher Cl with the 
inverse transformation algorithm D, and obtain the decode sentence RR1. When the 
1 st encryption IC 84 and the 2nd encryption IC 86 are the things of normal, this 
decode sentence RR1 is in agreement with said random number R1. 

(3) While generating and memorizing a random number R2 in the 2nd encryption IC 86, 
combine this with said decode sentence RR1, and decrypt with said inverse 
transformation algorithm D. Said authentication key S is used for decode. The 2nd 
encryption IC 86 transmits the decode sentence C2 to the 1st device 81 through the 
transmitting section (not shown by a diagram) of the 2nd device 82. This is passed to 
the 1st encryption IC 84 by the 1st device 81. 

[0081] (4) In the 1st encryption IC 84, encipher said decode sentence C2 with said E 
function, and divide the result into the separation data RRR1 and the separation data 
RR2. In addition, if the separation data RRR1 are the case of an exchange by the Just 
device, they are in agreement with said decode sentence RR1 and random number R1. 
Moreover, the separation data RR2 are in agreement with said random number R2. 

(5) The random number R1 memorized at said step (1) in the 1st encryption IC 84 is 
compared with said separation data RRR1, and in being in agreement, it attests the 
justification of the 2nd device 82 including the 2nd encryption IC 86 and the 2nd 
encryption IC 86. 

[0082] (6) In the 1st encryption IC 84, encipher said separation data RR2 with said E 
function, and transmit to the 2nd device 82. The 2nd device 82 passes this cipher C3 
to the 2nd encryption IC 86. 

(7) In the 2nd encryption IC 86, decrypt said cipher C3 with said inverse 
transformation algorithm D, and obtain the decode sentence RRR2. 

[0083] (8) In the 2nd encryption IC 86, compare with said decode sentence RRR2 the 
random number R2 memorized at said step (3), and when in agreement, attest the 
Justification of the 1st device 81 including the 1st encryption IC 84 and the 1st 
encryption IC 84. 

(9) Generate the data transfer key K in the 1st encryption IC 84 by combining said 
random number R1 and said separation data RR2. 

[0084] (10) Generate the data transfer key K in the 2nd encryption IC 86 using said 
decode sentence RR1 and said random number R2. 

(1 1) In the 1st encryption IC 84 of the 1st device 81, repeat until it finishes 
transmitting all the digital works that should transmit the processing which enciphers 
the blocked digital work mj (64 bits) which is sent from MPU83 using the data transfer 
key K obtained at the above-mentioned step (9), and transmits the acquired cipher CJ 




to the 2nd device 82. 

[0085] (12) Receive the enciphered above-mentioned digital work Cj (64 bits) which 
the 1st device 81 transmitted in the 2nd encryption IC 86 of the 2nd device 82 
corresponding to a step (11), decrypt using the data transfer key K obtained at the 
above-mentioned step (10), and send the obtained digital work mmj to MPU85. This 
decryption is repeated as long as the above-mentioned digital work Cj is transmitted 
from the 1st device 81. 

[0086] Thus, mutual recognition, share-izing of the data transfer key K, and 
cryptocommunication of data are performed by the encryption equipment of the 
gestalt 3 of operation between the 1st device 71 and the 2nd device 72 like the case 
of the gestalten 1 and 2 of operation. In addition, in the above-mentioned step (1), (2), 
(6), and (7), association of two random numbers is enciphered in encryption of one 
random number, a step (3), and (4). When using E function of 64-bit width of face, and 
the inverse transformation algorithm D, it is good to pad the value of 32 bits of 
immobilization to the 32-bit remaining input about the former, using each random 
number as 32 bits. For example, it is making a random number into low order 32 
BITSU, and making 32 bits of high orders into zero altogether fixed etc. Moreover, 
about the latter, it is good to input united 64 bits into each function as they are. 
[0087] Moreover, when making bit length of each random number into double 64 bits, 
the former should just perform the code which inputs into a function as it is, repeats 
each function twice, and uses it about the latter, for example, has a chain like the 
CBC mode. In the gestalt 3 of the operation described above, it differs in the 
gestalten 1 and 2 of operation, and the random number for authentication and the 
random number for share-izing of a data transfer key are made to serve a double 
purpose. And comparison processing for the random-number generation for 
authentication or authentication is performed within Encryption IC. Therefore, since a 
random number does not appear besides Encryption IC if it remains as it is, it is more 
safe to an attack using Encryption IC as a decoder. Moreover, the number of bits of 
each random number can secure safety sufficient at least by this. 

(Gestalt 4 of operation) Next, the encryption equipment concerning the gestalt 4 of 
operation is explained. 

[0088] This equipment is the operation gestalt which pursued miniaturization of 
Encryption IC, and is different from the gestalten 1-3 of the above-mentioned 
implementation in the point which has adopted one direction authentication, and the 
point that a data transfer key is exhibited. However, cryptographic algorithm E and its 
inverse transformation algorithm D are premised on being made secrecy. Drawing 5 is 
drawing showing the processing sequence in the case of transmitting the digital work 
mj to the 2nd device 92 from the 1st device 91. 

[0089] Drawing 6 is the block diagram showing the hardware configuration of the 1 st 
encryption IC 94. 

(1) First, the random-number generation section 101 of the 1st encryption IC 94 




transmits to the 2nd device 92 through the external I/F section 100 while it generates 
the random number R1 combining and [ challenge ] and a data transfer key and stores 
it in the random-number storing section 102. 

(2) To the received random number R1, decrypt the 2nd encryption IC 96 using the 
1 st encryption IC 94 and the authentication key S owned in common beforehand, and 
it transmits the obtained decode sentence Cl to the 1st device 91. 

[0090] (3) Encipher the E function 106 in the 1st encryption IC 94 using the same 
thing as the above-mentioned authentication key S beforehand stored in the 
authentication key S storing section 103 to the decode sentence Cl which received 
through the external I/F section 100 and a switch 105. The data RR1 obtained as a 
result are sent to a comparator 108 through a switch 107, and are compared with the 
random number R1 currently held at the random-number storing section 102 here. 
[0091] (4) Since it can attest with the 2nd device 92 being a just device when in 
agreement as a result, a comparator 108 controls a switch 104 so that the random 
number R1 currently held at the random-number storing section 102 is used as a data 
transfer key. 

(5) Encipher using the random number R1 sent through a switch 104 to the digital 
work mj sent through the external I/F section 100 and a switch 105 from MPU93, and 
transmit the E function 106 to the 2nd device 92 through a switch 107 and the 
external I/F section 100. 

[0092] (6) In the 2nd encryption IC 96 of the 2nd device 92, to the digital work Cj sent 
from the 1st device 91, decrypt using the random number R1 received at the above- 
mentioned step (2) as a data transfer key, and send the obtained digital work mmj to 
MPU95. Thus, with the gestalt of this operation, authentication, share-izing of a data 
transfer key, and cryptocommunication are realized by the steps and components of 
the gestalten 1-3 of operation fewer than a case. 

[0093] In addition, since the random number R1 transmitted to the 2nd device 92 from 
the 1st device 91 is used as a data transfer key as it is, a data transfer key may be 
easily known for the gestalt of this operation by the 3rd person. However, since 
cryptographic algorithm E and its inverse transformation algorithm D are made into 
secrecy as mentioned above even if the 3rd person who got to know the data transfer 
key is going to intercept and decrypt the digital work Cj, the attempt is not successful. 
[0094] Moreover, since a means only for the random-number generation section 101 
to be able to store the new random number R1 in the random-number storing section 
102, and to store the new random number R1 in the random-number generation 
section 101 from the outside of this 1st encryption IC 94 does not exist even if that 
3rd person is going to decode cryptographic algorithm by forging the convenient 
random number R1 , that attempt is not successful, either. Thus, if cryptographic 
algorithm and its inverse transformation algorithm are made into secrecy, 
authentication, generation of a data transfer key, and cryptocommunication are 
realizable with compact encryption IC like the gestalt of this operation. 




[0095] In addition, in the gestalten 1-4 of the above-mentioned implementation, the 
following is desirable as an approach (it is made to memorize) of setting the 
authentication key S as Encryption IC. That is, some authentication keys S are 
beforehand set up at the time of manufacture of Encryption IC, and the part which 
remains is the approach of writing in after manufacture of the encryption IC. A part of 
authentication key S storing section 64 is constituted from a mask ROM which wrote 
in some authentication keys S beforehand, and, specifically, the part which remains 
consists of postscripts ROM which can be written in programmably. 

[0096] When constituted only from a mask ROM, this Since through a help for 
creation of the final encryption IC. while it is safe When there is a fault that the 
analysis of the set point is easy, in the chip analysis by reverse engineering and it 
constitutes from postscript ROM on the other hand Since a help is minded and there 
is a fault that a mistake mixes or injustice becomes possible while the analysis by the 
reverse engineering of the set point is difficult, it is for compensating both fault of 
them. 

[0097] Moreover, it may be as follows as an example of the cryptographic algorithm in 
the cryptocommunication of the gestalten 1-4 of the above-mentioned 
implementation. A digital work is divided into a 64-bit block by the transmitting side, 
and said data transfer key K (64 bits) and exclusive OR for every bit are taken. The 
result is made into a cipher. A receiving side should Just take similarly the exclusive 
OR of the 64-bit cipher and the data transfer key K which were received. The block 
of a basis decodes by this. 

[0098] Moreover, the data transfer key K is not considered as immobilization, but 
there is also the approach of updating the data transfer key K used, while taking a 
synchronization by the transmitting side and the receiving side for these the blocks of 
every. For the updating, said E function and inverse transformation algorithm D may 
be used. The code/decode within a block may be the exclusive ORs described 
previously. Moreover, although it sets in the gestalten 1-4 of the above-mentioned 
implementation and some examples of a challenge response mold are shown as the 
authentication approach, this invention is not restricted to these examples. For 
example, you may be another example of the challenge response mold of generating a 
random number by the encryption IC by the side of authentication, sending this as 
challenge data, and comparing the response data for reference which are an 
authentication side with the response data returned from the certifioation side, and 
were generated. 

[0099] in addition — although the technique of carrying out authentication and 
cryptocommunication to insurance on a scale of a small circuit was indicated in the 
gestalten 1-4 of the above-mentioned implementation — the reinforcement of safety 
— therefore, it cannot be overemphasized that required circuit magnitude has the 
relation of a trade-off. Therefore, the safety of cryptocommunication can be 
strengthened with carrying out additional installation of a new conversion means to 




perform data-conversion F() for the following objects when allowances are in the 
circuit magnitude which can be mounted in MPU or Encryption IC. 

(1) One of them is making a transmission line neither the challenge data of a plaintext 
nor the response data of a plaintext flow. 

[0100] For example, in the processing sequence (a step (1), (3), (6), (7)) with which 
the 1st device 51 shown in drawing 1 attests the 2nd device 52, it changes as follows. 
In a step (6), the 2nd encryption IC 56 does not send the separation data RR1 to 
MPU53, but gives predetermined conversion F() to the separation data RR1, and 
sends the data F (RR1) obtained as a result to MPU53. 

[0101] In a step (7), MPU53 does not compare a random number R1 with the 
separation data RR1 , but gives the same conversion F() as what was used for the 
random number R1 at the above-mentioned step (6), and compares the data F (R1) 
obtained as a result with the data F (RR1) sent from the 2nd encryption IC 56. Since 
it is avoided that a part of cipher Cl and its plaintext RR1 flow a transmission line, 
the safety to a known plaintext attack is strengthened with doing in this way. 

(2) Another is making it not use challenge data as a data transfer key as it is. 

[0102] For example, in the step (5) shown in drawing 5 , the 1st encryption IC 94 
gives predetermined conversion F() to a random number R1. not using a random 
number R1 as a data transfer key as it is, and uses the data F (R1) obtained as a 
result as a data transfer key. Similarly, in a step (6). the 2nd encryption IC 96 gives 
the same conversion F() as what was used for the random number R1 at the above- 
mentioned step (5), not using a random number R1 as a data transfer key as it is, and 
uses the data F (R1) obtained as a result as a data transfer key. 

[0103] The data transfer key F (R1) can be kept secret, and the safety of 
cryptocommunication is strengthened with doing in this way. 

(3) Another is complicating joint processing further. For example, in the step (9) 
shown in drawing 1 , the 1 st encryption IC 54 gives these [ R3 and RR4 ] 
predetermined conversion F() rather than only combines a random number R3 and the 
separation data RR4 in the direction of a digit, and uses as the data transfer key K 
the data F (R3, RR4) obtained as a result. 

[0104] Similarly, in a step (10), the 2nd encryption IC 56 does not only combine a 
random number R4 and the separation data RR3 in the direction of a digit, but gives 
the same conversion F() as what was used for these [ R4 and RR3 ] at the above- 
mentioned step (9), and uses as the data transfer key K the data F (R3, RR4) 
obtained as a result. The generation procedure of the data transfer key K is 
complicated, and the safety of cryptocommunication is strengthened with doing in this 
way. 

(Example of adaptation to concrete communication system) As mentioned above, the 
encryption equipment concerning this invention is equipped with the small encryption 
IC of magnitude, and has a necessary minimum function for securing the safety of the 
communication link between devices. Therefore, this encryption equipment is suitable 




equipment for the communication equipment with which secret communication is 
needed and a small thing is demanded, for example, the multimedia related equipment 
treating a portable telephone or a digital work etc. 

[0105] Drawing 7 is drawing showing the example of application to the concrete 
communication system of the encryption equipment concerning this invention, and 
shows a general view of the regeneration system of digital works, such as a film. This 
system consists of SCSI cable 116 grade which connects the optical disk drive 
equipment 1 10 corresponding to the 1st device in the above-mentioned operation 
gestalt, the picture reproducer 1 1 1 corresponding to the 2nd device, and them. It is 
the system which enciphers the compression image data read with optical disk drive 
equipment 1 10, transmits to picture reproducer 111, and carries out image 
reproduction there. 

[0106] Drawing 8 is the block diagram showing the configuration of optical disk drive 
equipment 110. MPU124 by which optical disk drive equipment 110 controls the whole 
equipment. The SCSI controller 121 which is a communication interface with picture 
reproducer 111, The read-out control section 122 which controls the optical head 125, 
and reads and controls image data from an optical disk 1 15, It consists of encryption 
IC 123 equivalent to the encryption IC of the 1st device in the above-mentioned 
operation gestalten 1-4. After picture reproducer 111 attests that it is a just device, 
the image data recorded on the optical disk 115 are read, and it enciphers in 
encryption IC 123, and transmits to picture reproducer 111 through the SCSI cable 
116. 

[0107] Drawing 9 is drawing showing a general view of the circuit board mounted in 
the interior of optical disk drive equipment 110. Encryption IC 123 is LSI formed in 
one silicon substrate, and is carrying out the configuration of the flat package by 
which the mould was carried out with plastics. Drawing 10 is the block diagram 
showing the configuration of picture reproducer 111. MPU131 by which picture 
reproducer 1 1 1 controls the whole equipment, and the SCSI controller 130 which is a 
communication interface with optical disk drive equipment 110, The encryption IC 132 
equivalent to the encryption IC of the 2nd device of the above-mentioned operation 
gestalten 1-4 It consists of an MPEG decoder 133 which elongates the compression 
image data decoded by encryption IC 132, and the AV signal-processing section 134 
which changes the elongated image data into an analog video signal, and carries out a 
video output to CRT1 12 and a loudspeaker 114. 

[0108] The digital work recorded on the optical disk 1 15 by applying the encryption 
equipment concerning this invention to such an image regeneration system is 
protected from an illegal copy etc., and the healthy development in the secondary 
market of a multimedia related product can be expected. 

[0109] 

[Effect of the Invention] The encryption equipment concerning this invention so that 
clearly from the above explanation A 1st random-number generation means to be 




encryption equipment with which the device which performs share-izing of a data 
transfer key and cryptocommunication using the data transfer key is equipped, and to 
generate the 1st random number for share-izing of said data transfer key, A 1st 
random-number maintenance means to hold the 1st random number generated by 
said 1st random-number generation means, A 1st transmitting means to transmit the 
1st random number generated by said 1st random-number generation means to the 
phase hand-loom machine of said cryptocommunication, the 1st random number held 
at said 1st random-number maintenance means — using — the time — said strange 
data transfer key — generating — data transfer — a key — generation — a means - 

- It has a transfer data encryption means to encipher using said data transfer key to 
the transfer data set as the object of cryptocommunication. Said 1 st random-number 
generation means, said 1 st random-number maintenance means, said data transfer 
key generation means, and said transfer data encryption means are realized in the 
circuit in one IC, and said 1st random-number maintenance means is characterized by 
holding said 1st random number to the field which cannot be accessed from the 
outside of said IC. 

[0110] since the 1st random number relevant to generation of a data transfer key is 
directly held by this inside [ which cannot be accessed from the outside ] Encryption 
IC the time — a strange data transfer key — each device — insurance — sharing 

— having — cryptocommunication — carrying out — having . Moreover, since 
Encryption IC has a necessary minimum function for securing the safety of the 
communication link between devices, it is realizable in a small circuit. 

[0111] Here, said encryption equipment is equipped with a 1st encryption means to 
encipher further the 1st random number generated by said 1st random-number 
generation means, said 1st encryption means is realized in the circuit in said IC, and 
said 1st transmitting means can also be supposed that the 1st random number 
enciphered with said 1 st encryption means is transmitted to said phase hand-loom 
machine. Thereby, since it becomes impossible for the 3rd person to know the 1st 
random number relevant to generation of a data transfer key directly, the secrecy 
nature of a data transfer key is maintained, and cryptocommunication will be 
maintained even if cryptographic algorithm and its inverse transformation algorithm 
are known. 

[01 12] Said device is what said phase hand-loom machine attests mutually that it is a 
just device with by the communication link based on the Challenge Handshake 
Authentication Protocol of a challenge response mold here. A 2nd random-number 
generation means by which said encryption equipment generates further the 2nd 
random number for challenge data transmitted to said phase hand-loom machine. It 
judges whether the response data answered from said phase hand-loom machine to 
said challenge data and said 2nd random number are in agreement. When in agreement, 
it has an authentication means to attest with said phase hand-loom machine being a 
just device, and said data transfer key generation means can also be supposed that 




said data transfer key is generated when said authentication is made. 

[0113] By this, when the mutual recognition between devices is successful, the data 
transfer key of normal will be generated simultaneously, and the safety of secret 
communication improves. Here, it can also be supposed that said 2nd random-number 
generation means and said authentication means are realized in the circuit besides 
said IC. Thereby, directly, since the processing section irrelevant to generation of the 
part irrelevant to the safety of communication system, i.e., a data transfer key, is 
prepared out of Encryption IC, it is controlled that the magnitude of Encryption IC 
becomes large unnecessarily. 

[0114] A decryption means by which said encryption equipment decrypts the 
enciphered joint data which have been sent from said phase hand-loom machine 
further here, A separation means to divide the decrypted joint data into the 1st 
separation data equivalent to response data, and the 2nd separation data which 
remain. It has a 2nd transmitting means to answer said phase hand-loom machine in 
said 1st separation data. Said 1st encryption means Said 1st random number and said 
2nd random number are combined, and the joint data obtained as a result are 
enciphered. Said data transfer key generation means By combining said 1st random 
number and said 2nd separation data, said data transfer key can be generated and it 
can also be supposed that said decryption means and said separation means are 
realized in the circuit in said IC. 

[0115] Moreover, a 2nd transmitting means for said encryption equipment to use said 
2nd random number as challenge data further, and to transmit to said phase hand- 
loom machine, A decryption means to decrypt the enciphered joint data which have 
been sent from said phase hand-loom machine. It has a separation means to divide 
the decrypted joint data into the 1st separation data equivalent to response data, and 
the 2nd separation data which remain. Said authentication means Said decision and 
authentication are carried out as response data answered from said phase hand-loom 
machine in said 1st separation data. Said 1st encryption means The challenge data 
transmitted from said phase hand-loom machine and said 1st random number are 
combined, and the joint data obtained as a result are enciphered. Said data transfer 
key generation means By combining said 1st random number and said 2nd separation 
data, said data transfer key can be generated and it can also be supposed that said 
decryption means and said separation means are realized in the circuit in said IC. 
[0116] This has a necessary minimum function for securing the safety of the 
communication link between devices, and encryption equipment equipped with the 
small encryption IC of magnitude is realized. Here, it can also be supposed that the 
algorithm of encryption by said transfer data encryption means is characterized by 
being the same as that of at least one thing of said 1st encryption means and said 
decryption means. 

[01 17] Since this becomes possible to make serve a double purpose and mount a 
transfer data encryption means, the 1st encryption means, and a decryption means by 




one converter, the circuit magnitude of Encryption IC is reduced. Here, the algorithm 
of encryption by said transfer data encryption means differs from anything of said 1st 
encryption means and said decryption means, and can also be simplified rather than 
which thing. 

[0118] Thereby, since the size of transfer data is large, even if it is a case so that the 
encryption may be repeated repeatedly, the nonconformity that a data transfer time 
will benefit encryption long substantially is avoided. Here, said transfer data 
encryption means can also presuppose that said transfer data are enciphered using a 
break and the part to which said data transfer key corresponds to each block to the 
block of fixed length. 

[0119] This becomes possible also to the cryptocommunication of the large transfer 
data of data size to apply this encryption equipment. Here, said transfer data 
encryption means can also be supposed that said encryption is performed by taking 
the exclusive OR of said block and part to which said data transfer key corresponds. 
[0120] It enables this to realize a transfer data encryption means in a simple logical 
circuit. Here, also suppose that the code in said 1st encryption means and a 
decryption with said decryption means are the same conversion algorithms. This 
becomes possible to make serve a double purpose and mount the 1st encryption 
means and a decryption means by one converter, and the circuit magnitude of 
Encryption 1C is reduced. 

[0121] Here, said 1st encryption means and said decryption means perform said 
encryption and decryption using the key data beforehand held in said IC, a part of the 
key data is stored in the mask-ROM field in said IC, and it can also be supposed that 
the part which remains is stored in the postscript ROM field in said IC. It enables this 
to compensate an authentication key with the fault at the time of constituting only 
from a mask ROM, and the fault at the time of constituting from postscript ROM. 
[0122] Said device is what said phase hand-loom machine attests mutually that it is a 
just device with by the communication link based on the Challenge Handshake 
Authentication Protocol of a challenge response mold here. A decryption means by 
which said encryption equipment decrypts the enciphered joint data which have been 
sent from said phase hand-loom machine to said challenge data further, A separation 
means to divide the decrypted joint data into the 1st separation data equivalent to 
response data, and the 2nd separation data which remain, An authentication means to 
judge whether said 1st random number and said 1st separation data are in agreement, 
and to attest with said phase hand-loom machine being a just device when in 
agreement, A 2nd encryption means to encipher said 2nd separation data when said 
authentication is made. It has a 2nd transmitting means to answer said phase hand- 
loom machine by using said enciphered 2nd separation data as response data. Said 
data transfer key generation means By combining said 1st random number and said 
2nd separation data, said data transfer key can be generated and it can also be 
supposed that said decryption means, said separation means, and said 2nd encryption 




means are realized in the circuit in said IC. 

[0123] Since only one random number is generated and it is used for the object of 
both the object for authentication, and for generation of a data transfer key by this, 
the circuit magnitude for random-number generation with encryption equipment is 
mitigated. Moreover, since the random-number generation and comparison processing 
for authentication are performed in the interior of Encryption 1C, the safety of 
cryptocommunication is raised. 

[0124] Moreover, this invention is communication system which consists of the 
transmitters and receivers which perform share-izing of a data transfer key, and 
cryptocommunication which used the data transfer key, and can also be supposed 
that these transmitters and a receiver are equipped with the above-mentioned 
configuration, respectively. A cryptocommunication system with high safety is directly 
realized by two random numbers relevant to not being transmitted and received if the 
random number relevant to generation of that a data transfer key is generated while 
mutual recognition is performed between a transmitter and a receiver by this, and a 
data transfer key remains as it is directly, and generation of a data transfer key 
suitable to realize using the small encryption 1C of magnitude, since it is provided from 
a transmitter and a receiver, respectively. 
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[Brief Description of the Drawings] 

[Drawing 1] It is drawing showing the processing sequence of the encryption 
equipment concerning the gestalt of operation of the 1st of this invention. 

[Drawing 2] It is the block diagram showing the hardware configuration of the 1 st 
encryption 1C 54 shown in drawing 1 . 

[Drawing 3] It is drawing showing the processing sequence of the encryption 
equipment concerning the gestalt of operation of the 2nd of this invention. 

[Drawing 4] It is drawing showing the processing sequence of the encryption 
equipment concerning the gestalt of operation of the 3rd of this invention. 

[Drawing 5] It is drawing showing the processing sequence of the encryption 
equipment concerning the gestalt of operation of the 4th of this invention. 

[Drawing 6] It is the block diagram showing the hardware configuration of the 1 st 
encryption 1C 94 shown in drawing 5 . 

[Drawing 7] It is drawing showing the example of application to the concrete 
communication system of the encryption equipment concerning this invention. 
[Drawing 8] It is the block diagram showing the configuration of the optical disk drive 
equipment 110 shown in drawing 7 . 




[Drawing 9] It is drawing showing a general view of the circuit board mounted in the 
interior of this optical disk drive equipment 110. 

[Drawing 10] It is the block diagram showing the configuration of the picture 
reproducer 1 1 1 shown in drawing 7 . 

[Drawing 1 1] It is drawing showing the processing sequence of the one direction 
authentication concerning the 1st conventional technique. 

[Drawing 12] It is drawing showing the processing sequence of the bidirectional 
authentication concerning the 2nd conventional technique. 

[Description of Notations] 

51, 71, 81, 91 The 1st device 

52, 72, 82, 92 The 2nd device 

53, 73, 83, 93 MPU of the 1st device 

54, 74, 84, 94 1 st encryption IC 

55, 75, 85, 95 MPU of the 2nd device 

56, 76, 86, 96 2nd encryption IC 

59 Data Transfer Key K Generation Section 

60.101 Random-number generation section 
61,100 External I/F section 

62.102 Random-number storing section 
63 Bond Part 

64.103 Authentication key S storing section 
65, 66, 68,104,105,107 Switch 

67,106 E function 

69 Separation Section 

70 Data Transfer Key K Storing Section 
108 Comparator 

1 10 Optical Disk Drive Equipment 

1 1 1 Picture Reproducer 

121 SCSI Controller 

122 Control Section 

1 23 Encryption IC 

124 MPU 

125 Optical Head 

130 SCSI Controller 

131 MPU 

1 32 Encryption IC 

133 MPEG Decoder 

134 AV Signal-Processing Section 
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□ -y '7trnm^—^Bmu<r>nm^^^t(ommmm 
S«]^2:^2:2:lcS:y. BuiBBi^^b:&^^^3^:2;^1tg^ 

9 iBKoBi^^b^Bo 

[M^I* 1 1 ] MIBm 1 Bi^fb#STOBt^2:s5fBa 
^^b#®T<DB^fb2:ti. I^-(7)S}||7;l/=l'y XA7$ 




(3) 



10-51439 



oiBttoBg^fkSKo 

[ff^cis 1 2 ] BuiBS 1 
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[HaRJII 3] MIB^IStSs ^+UVv’'UX/1fV7,S 
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5Ux<K>Xx— 

[0 0 0 7] c;<7)u;^/i^>xx— 



tc UX/1t>Xx-^ ^i-cO|gSEa<!;^^S«!^ffll'Ta 

^bf So C -\’ U V V’x- ^ <!: -Srm 

[0 0 0 8] ccT\ it^^ssTttn ax— ?s[cj: 
y^$S¥35:*^A'60i^32:*^^®i:aT-®So ¥* 
T (S, X) tm<. laua 
X— ? S lc<fc y SBt^3t«^*'6¥X*^'\<Di:fl^ 

I Nvtop^icin 

T I NV (S, T (S, X) ) = X 
®BI«6'SSo iinid:¥3:bX^Bt^^^L. 
Ift'rSiTctCMSC.t^-iiRtLTL'So 

2;iif .So 0t^^«!T-S S fc46tctta S 0SQ 
(S, X) A'e¥32:X^3?46S 
0*^fflitT-^Sc:<i:)&^;2Jg7£So mwtiiim 
(S, ) . (S, ) tIB 

■To 

[0 0 0 9] 01 1«. |gfBjitS[C!B*g?nTl'SiSiiE 

-fj^oi-m^mmi:^^. 01 ins. %^(D^m^ 

I *'6m2(D«i^i 2{cx':^^i;u*f^!t!!!im j ^ejurs 
Ji^3b’«5TjrnTi'So dCT'tn skti^si ia’!M2 
®^S1 20Ei'tt^{iig-rSo i-XTi:(0S^3i?(D-:^i^ 
iSBE:^';£®i()f^^ia0[c/T^i*-n/cXx ■> ym^iz'^nT 

mmr^. 

[0 0 10 ] ( 1 ) mioasffi nn slssr 1 ^s^ic-r 

So i-LTiin«^-\'U>v’'x— S»2:LTa«K^^L 

TS2<7)«»gS1 2[CjMffi-rSo 
(2) S2(D«#§1 2[ic:0iLa^gtt<!;S<b. M2®^ 
s 1 2 tc^gw?nri.'s^i(ffi(7)igiias ^Bi^ai; lt 
c:®jgLa^Bi^<b-rSo i-LTi-<7)ie^c 1 

Xx— Sf <t LTii1tSS^7> LTE 1 1 1 

So 

[00 11] (3) mioasi IliCOUX.I^VXx- 
^^§t:PgXSi. S1®«I^1 1 l;H«*rt5-nTl'SigE 
as^a^a.*:LTii<oux.i<vxx-:?c 1 
rso 

(4) m 1 <DWm 1 1 lix ^I^ro^S*R R 1 1 ro^tl 

I I rtic-BfS'ffs-nTi.'ssLiatR 1 .titR-rso cn 
*’t-arn«-m 1 1 niS 2 ®asi 2 ^s 6 '^ia 

®T'Ss<bigiE-rSo -n. -aL*^tn^^3ifflt0#*' 
ElSt.®T'ttJ5:l'tcOi:i)iiMLTSa.S^E^8ff-rSo 
[0 0 12] (5) Sl®«t|1 ^\tm2(Dm.^^ 2^1 

Tm2®aS1 2tC52ffrSo ‘t.Lt. H2(D«IS1 2 
[tisiias 3 ^agtA^iiffiKicjg 

lBS5-nTl'S1i^lcin ^-om3 0aSli±IBXx->7 




(6) 
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(ZlT-iELLMi^x—SJC 1 

LTXx'>7(3)T1i^C0*g^R R 1 Ai«BufBR 1 
t-SLLTsl^rdsbs X7^'y7(4){CfcL'Tmi 
1 3 L&L\ 

[0 0 13] S1(7)«S1 1 i:®2(D«ISl 20 

F^ri'O'tl^ UV'^'x--? ,h UX/K>7.x--SiA< 
^0C;i:^5EDo/i:^iE^^30«S 
*^m2o«i^i 2tc^ti-r$rc<!:6'^^etx5o ^:t^ 
1 (Dmm 1 1 u 

(SLiit) =&iS-:3TC'5o 
(M2 04¥5|5Sjiri) ±IBM 1 

(i. fiiJ;^«'iSEO^. /\-Kx-r7.-2^aic|B1S^tiT 
y O X- 1? ^iElicDlSE^^^t- 2 0^11 1 

2[caLT^iE[c3Mlli-r5z;<!:t.^tg7-^5o COFp^S 
^mykt^tdsb. miO^SI 1*’!S20«S1 20iE 
ait«-5Sig-r«<!:(ilB$lc. ||2oaSI1 2<tmioas 
1 lOiEait^SSIS-rsctA'if^gt^So 
[0 0 14] S/-C, m(T)mi&mmLtcmz9i^^iu 
2icejisLTt'5 

i£j\- t 

■65/uc:ofc46li:iia«K±offl^oi^W1$tt3f.x- 

(Dtdsb. mmtafTit:^+^T-&v. 

ic . 

^ UTtiiMf 5 Bg 

ifoejii-rA:$x-^^Bg^{b-r«fc46o«s®»^. w 

T . iP 5 i , s ;„ 

[0 0 1 5] J-XT. ±IB*1 0^^^3ReffiT•^5-*l^|g 

m 2\t. 
01 2ic 

i,t. m^<Dmu2 1 *'em2oati2 2[cxs>'^;i/«ff 
%m j ^ai^{bL/c^l!;gJS-r««^*%?tlTt'-5o 
[0 0 16] lXTCO«£JROj®:^I^iSE<!:x— JifijMli 
fbO»]f^^llll2KC/TT?n/'cX X -y 7’#^{ca£o T 

(1) mi oati2 1 liSLDjR 1 cn«mi 

®tis^:n- Lrm 2 <Dm^ 2 2 icjintr ^o c cT-a?s 
R2(im2 0^S2 2 6'emi0^tl2 1'\om20^ 
lyyi/T^—ii tLToM^^n-o, osy. 

1 itm 1 (09^ uv'^'x-ijftcj^-r?) ux<K>xx-^f 
<b m 2 05^ b > 5>' X - -S? 01i[5|E:&J#0„ 

[0 0 17] (2) m2 0aS2 2(igL»R2 5^fiEU 
^-tvi:miO^S2 1 6'6§tt<bo/-cgLli[R 1 

c: .bT-^^x-^ R 1 M R 2 ^fFfi)c-r«„ C dT'IB 



^/T^fo ^LTm2O«S2 2O|giI®S^0g^a<bL 
T. COig^x— $!R 1 ||R2^0i^fbL. 
ci^mio^s2iicjMfl-r§o 
[0 0 18] (3) mi O^S2 1 (i. %2(Dm^2 2*' 
esflLfcBi^xc 1 ura^fb 

Ls ^Oi®mo±te^»Six— 5? R R K TfiE^»8lx 
-^iRR2i:-r5o 

(4) m 1 0 «il 2 1 Ttt. Z(D^mr-^ R R 1 ^m 1 
o«S2 1 ic-B^iBISTr^aTL'SaiBfR 1 <bJ±»r^o 
ii n*'-sS(rn«'jmta¥6'iSHii s^j^^TL'^ina 
?5:aST'£S2;iSE-r«o tLt.-SlL^tt4a«;iCT- 
^E5QS^tt3|/ff5o 

[0 0 19] (5) mi 0«?|2 1 ts. SLIiK^fg^Li: 
n^x—^eJSaKiLTiS^-r^o ^LTsulBSaL 
/c»!»x - iJf R R 2 i; C O X - ^ ISillli K^flS^Lfcii 
^x— 9RR2||K^mioaS2 lOiSESISrBt^ 
<bLTx ^-oBi^xc2^m2o«S2 2ic2ifrr«o 
(6) m20«»S22tt. mioaS2 lA'SSfiL/cBg 
^3tC2?ISESS^fflU'Ta^{bL. ^(D±1iL^^m 
x-'?RRR2. Ttt^i^Six— SfKKii-r^o 
[0 0 2 0] (7) m20«S2 2«. C05^Sitx— S* R 
R R 2^m2 0^S§2 2lC-BtlB1t?1aTl'5gL?fifR 2 

oTt'5iE^^litlT'S5<!:igEt-.5o tUt-SL* 

-15. m.mtLtc 

»*lx— Jf K K^x-:?icH!^K K t LTiS^rSo 
[002 1] (8) mi ®«ltl2 1 luiBx-^feig» 
K«fflt'Txv’'^;USf^tl^Bg#fbL. aiiK=&^FLT 
m2o«is2 2[cjiifi-r§. 

(9)m20«[S2 2T'ttC:;n^0UiBx— ?ejg®K K^ 
fflL'Ta^^bL. t(bOx'>'^;ugf^tt^i«a-r5o :: 
ZT\ tLtmi 0«S2 1 ti’iJEjiOfgESiS^^L. 

m 2 2 2 A^iEJiOiSE^^^ 

tt. Xx-y7(4)7-mi O^Sg2 1 
^ES^^LTt'^l'tO<b|iJ»rL. SSESQa^^SlfT' 
$/cmi oaS2 1 6'iiE3KOlSES^^LTfc6 
t\ m2 0asl2 2(iIE*80igESI^^LTt'5Ji^[c 
tt. Xx >y 7(7) [cfet'Tm 2 o;a#g 2 2 
iE3®O^EIi^WLTL'^l.'‘tO<!:¥ija/iL, ISESQS5- 
COJ: 3tc LTx7^;U*('F!|i!B*'TiE*a 
Sm-3Sai7« C <!: ^K±-r i. <b [HlB#lcTiE^iaS*'6iE 
A7« C <!; t E6±7§ il ,!; 5o 

[0 0 2 2] mi0^ig2 1 tm20«tl2 2 

LTl'SH^lefcC'TBuiBfgEaiS 
L7x-y 7(8) tc fcL'Tx7^/U*(^!|!!5*'i;a(i^ 
±^fi2l5-tiTl-'5IS(c. t.L. ^-Ox'7^;l/SfF!|!!a*^ 
imS^tczHf-?ns x^''7^;H«g»ieSa?tiri: 
-5-OxV 7^;Ug(^%ItiBi^(b?nT 
l'50T\ ^liR**x'7^;Ux— S!i:?§:oTfc‘J. tEO 
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[0 0 2 3] J-X±Oct:3tc. 

KEA’^MJlcfc < n 1 (T>wm 2 1 St>'m2 © 

«S2 2©|?gg|?^C^S*rt^;h.Tl'■5^SIISI*’^^^E^^T^^5 

<!: -r 5 1 ©icga lc»6' 6 Si' c: <!; * 

So SS. ^i’UV>>'x--S?©S«)©SL»©^®gP^x 
-■ ? ISJM® K ©£figgp*^^g|5 A' 6 7 <7 -b c: <h s 

SMT$Sl' C i: So 

[0 0 2 4] ^-n6«fi)cSI!l©®Ett^5t«-rSgt,a 
±IB©iSEE-?>x— ?}EJIiS©«§fbSl? 
I C <!: LTHia-rS75>£rSSo 
I C^»|/T-rsicli-flSlc^:^S»73A''A'*'S©T\ IS 
EaS^*^g^[cli)KK?tiSl'A'67-SSo 
[00 2 5] 

[5eB^A'i(W;£Lci:?i:-rs^M] tZ^t\ ±IB©m2 
yt^ts.mlas^f^m^(r>m^2 ^ ^ i C7^ii-rss46 

[cli. ^(O^otj: I C (JXTv mmt\ Cj <hl' 

•5c ) it:k<DSi^^mx^ctmmT'^^o 

• SL3SR 1 54fig-rsgLli(Sfi£g|5 

• Bi^3tc 1 «•^g^^b•rsS(»©^I^g|5 
•iSEEIiS^tS*rt-rSg|5» 

• SLiSR 1 i:»gix— 5f R R 1 ^JtK?-rSfc»©J±tJgp 

• x-^iBJ|fSK^S^-r;SSA6©gL^4fi)cgP 

• »Six-^ R R 2 ix— SffeJ^HK^S^LTBg^^b 
-rssiAwiii^as 

• X— SJej|iliK^tS*rt7SgB5J 

• X— 5ffeJ£®K^ffll'Tx'7'^;lS{«^Bg^^b-rS 
Bg^BP 

m2©aS2 2[CC)l'TtCtl,!:[^Sg©J«:®©/N- K 
■i7x7A''iK^$7-$S„ 

[0 0 2 6] C(D^^IC. ±iB^^3^^©|giiE:^^^ I C7 
*iiLfc©T-ii. 2-zxD^m^isa^. 2^<Dmm^ (m. 

l'S46lc. 0KJi1iA^:*;3^<Sy^^igg©ziXh7'y 
7lcoS*'Si:l'3P^S*^W7So SS. ±IBM2fif 
5l?S»Tli x-^ ^flg^fbf S S«S6©x- ■S' K ti 
Ml ©^S2 1 A'^^figLTi'SA^ 
tis©i:l^uasi!:j:y. C©lSlijtX:&©«gA'^R)6L 
Sfil^S«5-rS«96'Mf Ll\ 

[0 0 2 7] ]X±iM0^LSJ:5tc^ 
f Sfc46lcti. ISIiEM©^tg-¥>^©S46©^i!ffi©1fl8^ 

I aci^L;jA46TMii-rS:^j£A’!38!lMWT$S„ LA' 

L. fi^Jl?©:&j£lcfcl'T. iffi5ISE©BP^s x-^fiJS 
^©«^^b©a3»st>'x-x0i^fb©Bi55j?-r^T 1 o 
© I cTmmt^oT-it. ^© I 
<SoTLSl\ =IX h7'y7tcoSA’:So 
[0 0 2 8] *l«©/J'?Sili^<b I 

«SSr^jifa©$±tt^5SffirSfc©©iK^g« 
/J'PS©«gg5^-r sag^^b^a^jf^f S c 1 © 

gw<k-rSo z.z.i:'^mt\ Q\r-k(Dim.^Mr^. 



(1) ^©ais^4g3A'e.©7x 

■bXlc ct: y LA'tS^tiSl'o 

[0 0 2 9] (2) x-'J?l5J£ii^S^lc«^-rSo ^© 
Sti^i-gPA'6©7-7-feX[C<fc LA' 

S^tlSl'o 

(3) 11 L. iii1t'>XxA©S^tttcPliSLSl'gP5^^0g 
•^Ibl Clc1i;^Si'i:i:{cJ:^A 0g^1b i comm^m 
/J'^rSo tfc. 3|s:#6Bl©M2©g6<Hi. JI1i©/J\^S 
Bg^lbl C^ffll'TI|iI-rS©lCji?jiT'£*J. A'O. $ 
^tt©if I'Bg^iilf '>Xx^^ig«TS C (bT-SSo 
[0030] 

[pSi^«;£-rSAc©©#®] ±IBM1 ©gW^JifiEf 

SSi6{c*||Bltt. X— >iE3£S©«#1b<!:^©x— S? 

I'fcHg^Jili^lTS 3 ^§§[c{i^ S tlS Bg^ 
IbSaT'^oT. BulBx-^$SJMa©«^1b©fc46©M 
1 SL»^4fiE-rSM 1 buSBM 1 SLIScS 

1 SLIir^ffiJ#-rSM 1 S§L3S« 
S5IBM 1 1 

aH(^05fBBgi^jiis©ffi#micjsirrsM i >£is#® 
t. mum 1 nAcM i 

TB$^©huIBx— S» eiMa^4B)6-rSx-:?gjM^Sfi)6 
#Si:. Bg^jift©«|^i;ssej||x— ^I cS^LThuIB 

X— SfejiS^ffll'TBg^lb-rSiBjllx-^SfBg^lb#® 
buIBM 1 luiBM 1 aiJffiJt# 

Ift. SuIBx-^eJMiaSfie^lftSt/BuIBfeJSx-XBg^ 
Ill© I ci7g©0Krii3i?n. tuiBmm 
huIBI C©^i.g|5A'67^7-bX7$Sl'^ 
^tciuiBM 1 SLa^«^rrs c t 
[00 3 1] x-^fe5ligi©Sfi!6[CiI]g|| 

iSrSM 1 SL»«7i-g|5A'e7X-trXT^ Sl'flg^fb I C 
©rtg|5lc«lt?nS©T\ B$S©x— 

Bg^jillA'lTtotlSo Sfc. Bg^lb 
I ctt. «sp^a«©s^it^{g«-rssi6©ie^sg'j' 
m(owm:n-o(o-v\ d'^sa^T-ni^f sc <bA'T$ 

So 

[0 0 3 2] Sfcs ±IBM2©gM^]i^i£-rSfci6[C^: 
5gB^{4. x-^gj£Si©ft^1bi;^©x-:?l53Mli^ffl 
I' AcBg^li^^TS •? illll^SO^glf ^A' S «BE?ns 
iiffi'>XxZxT-^^T. ?-+iej£fS^St/S1S^ti. 9 
■VUV'7'LX/11VX^©iSE7P KP;Ulc#-d>< jifflc 
cfe y fflstcffi#«gA'iESs«§ST-ss d t L^ 

7t©T'SVs 7-VU>'7x-^ffl©*1gl 

Sf^^fiErSM 1 tulBx-^^SJ^SIffl 

<om2^Lm^ii!it^m2m^is!c^$st. MBMia 
»<!:«uiBM2gLiif^^^t-Sie^#IS<b, luiBig^x- 
^^Bg^fbirSflg^lb#®,!:. Bg^lb^tifcBulBig^x 
-^^illBffl^^SHcj^ffi-rSM 1 sulBtS 

#«S©M 1 2fS#ISA'eiaS1i?1afcBg^1b?+iAc)®# 

X— Jt^SirrSMlSIt^Si:. SfiLfcBulBii^^x 

-■ s*^a^ib-rsig^ib#s<b. a^ib^nsauiBig^ 




(8) 



10-51439 



X— 1 ^mr-^ t 
mt. HuiBBl5J»lx— SJ^UX*”VXx— SfiiLTSu 

m 2 §«#©<!:. gffl L/cMIBm 1 5JI6x-^ tmliW. 

MIBx— JifBJMH 
sulBISIDb^^Jti 
^fi£?tifcHuiBx-^!$£jMI»^ffil'TBijfBffl 
t 3 <h C t 

[0 0 3 3] ^tUCcfcU. jifS^SO-'SOT^T'ffiSig 

at- « 2 ^<DgLi»ii?-n^'niMff«isy’'S[iisA'5att 

[00 34] 

(mmcomm i ) 0 1 li. 

^tcm 1 <7)^tS<hm20«Sr^T'tii;iSSE<t:x— Ji^SI 
H® k <t X — J? ® Bg^afl <!; 3 HBS^Dfg^ 1 ic 

[0 0 3 5] 01T(i. micD^tlS 16'6S2<D«IS 
5 2 lCT':2'^;bS#!tam j 

i.o 0UCli. §*Sg|5K 5 2*’i«;^5Bg^<k 

^) ®10«SI5 HCfijietlfc* 

±i^<’i^ifTMPU5 3tm 
1 (O^mt I C 5 4 i:6'6«fi]6?ti5o 
[0036] MPU5314. c:®BB^fkS»[!;0^a)*ij 

X— ^fiij^acD^w^biciiSMiciiga^L^i'saa (0 

'^50Xx■y:^(1), (7)) ^'<t^3o ^ICDBg^iblCS 
4 ti. 1 •> :^C0¥»#: I C T'^ U > X— s? e]il8<7)« 

WblciI]gfl^[z:^^r5Saa (0t^J0Xx-y3^(3), (5), 
(9), (ID) 

[0 0 3 7] S2 0«ltg5 2lc]iA6tlfc2|s:SI 

:*:5-<5J[tTMPU5 5<5:m2 

(DBg^ib I C 5 6 M P U 5 5 tt. C 

00g^[bgatcH:S(7)*iJ® y a ^ ROM 

t^(r>vmyn^=7h^wnt^^m^'(<7uyaM'v 
+f<bRAMH*'6^‘J. x-^$B]M^(7)tt*[b[cil]gW 
(045<DXx'y7(2). (8)) ^fTJ& 



[00 3 8] M2cO0i^'(bl C5 61S. 1 9^ •> 
WlCT3bV. X— ?$£JSao«^[b[CiIjgWlcM4-r 

^saa (0'poxxx:^(4), (6), (10), (12)) 

3o ^:J5. CO#Sg©flJte[cfcl'T(i. X— ?Bg^fb3i 
(DES:0ata Encrypt ionStandard) iC^fflLfc 6 4 ti' 
•y h 7a y 7SS^7)]/7V XU E i:^-0i®S}ft7;l/d’'J 
XAD^ffll'Tt'So m7}itSmTl\^7<J XU E 
TBg^-fbj . 
r^t^fbJ <»:f(r>-r«o 

[0 0 3 9] S/c. mi 00i^[b I C 5 4[i0i^7;nr 
'JXUEtHf^. m2CDBg^{b I C 5 6 ld:a5^]$7;l/=i' 
uxuDmi^mx^. #Bi^fbic5 4. 5 
j-x 

T. 01^c/T^^^fcXx•yx#^^c^^oT. mmmm 

[0 0 4 0] (1) mi©«S5 1(DMPU5 3[Cfcl'T 
SLSRI (3 2lf'yh) ^±mLT. 
m 1 CDBg^^b I C 5 4 (Og-To 
(2) Xx>yX(1)<!:IHi[C. m2(7)«S5 20M P U 5 
5tcjjt'TSL»R2 (3 2lb'-y|') IBtSf 

5i;<!:t[tm2(D0§^‘fb I C 5 eicJMffirSo 
[004 1] (3) mi I c 5 4[cfei'T. a» 
R3 (32t;-yh) ?i-a5<i:U7X-bXT'^35:l' 

Wc«[*rtr«„ ^LT, BuIBMPUT^fiEL/cgLIifR 
1 <b|ijiBgLli[R 3^^^LTEIHit7'Bi^{b-r5o Z.Z. 
T\ §B^" II "«2O0gLli^«T73l^[C^^LT6 4e 
•y h (S,»R 1 ^±te3 2 t;''y h. SLSgR 3^Tffi3 2 
li''yh) 2:-r^ir<!:^.TvLTt'«o S/c. ss^itizitm 
1 WBg^-fb I C 5 4St>m 2 OBi^fb I C 5 6 

mioBi^ 

<k I C 5 4«s mi 0«#|5 1 oaiflgp (0T-«5^LT 
t'Si.') ^^]-LT±iBBi^igmc 1 ^m2<Dm^5 2iz 

[0 0 4 2] (4) X7y70)tmmiz. m20Bg^<b 
IC5 6{Cfct'T. a,iSR4 (3 2t'-yh) 

Tv ^^gPJ:‘J7'7-bXTt^l'®felt[CtSiiirt-r5o HuiSM 
P UT'4(i!tLfcgL»R 2 <!:B?fBiL»R 45!®^LTi®S 
«7/udru XU D T«^ib-r i.o ai^iciiMiBisE^s 
m2C0Bg^'fb I C 5 6tiv m2CO«S5 205 
SifiBP (0Tti/T^LTO'?5:lD ^^>LT^t^iigmC 2 
(6 4 tf-y h) ^m 1 o«s5 1 [ci^^rr^o 
[0 0 4 3] (5) mi^Bi^fbl C54lCfcl,'Tv sufB 
m 2 (Dmm 5 2 *'e§ffl Lfc«^XC 2 ^gijIB E MIS^ 
fflt'TBuHBigfiaSTBg^^bir^o ^LTv ^#et^/c6 
4 ti'-y t'«-^0±te3 2 tf-y h-TS55^SSIx-^ R R 2 
<tTfi3 2 Ef>y hT^5»S6x-^ R R 4l::5JS8tt-«o 
? eiCv »mx— ? R R 2 am 1 s i wjnaai^ 

^]'LTm2(7)a#g5 2[cSfflU -:^v ^^Six-^RR 
4W7Ui:ai^-r[cmi oBi-^fb i c 5 4P<g(7)^^BiJ6'e7 
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[0 0 4 4] ^3b\ miCDBf^fk I C54SlfH20Bg 
^•fk I C 5 6A’iSl'lciE*i%t<0T'Syi^L;igIias:& 
^S^# HuiB^Six—S! R R 2 tilu IBJg 

2(D«S5 20MPU 5 5 *'4fi£LfcSLJ»R 2 <!:-i!f 
L. aulB^iKx— S' R R 4 tiauIBrn 2 tOBi^^k I C 5 6 
Jb^PggBlcftiN^LTl'miSR 4 i-SSr^So 

(6) Xx'yy(5)<klli«lC, »2<7)Bg^{k I C561CJ5 
k'T. buIBM 1 COBg^fk I C 5 4A'6§<iLfcBg^*C 

1 ^ H5iBj2S]ft7/l/ d' i; X/x D I'TlulBISIia S T- 

^LT. ^fen/^:6 4tf•y h^^0±[fi3 

2 Ik'-y hT®«Si’8lx-S' R R 1 iT'(ii3 2 tk-y hT3& 

S»Six— S' R R 3 icSJSi-r^o ^ SIC. »Sffx— S' R 
R 1 2<DJIIfig|5^^LTmi 1 

(cjSfflL. »SSx-‘S'RR3ii^lcai?-ricm2 

®Bi^[k I c 5 6P»g<D^®)b'e7'2-trXT'?SL'li^lc 

[0 0 4 5] tsfi. IglcDBi^fk I C54St>'H2(0Bi 
^^k I C 5 6A'iHl'[CiE3i^t,<OT-^UI^i;iigSEas^ 
huIB^^IIx-S' R R 1 tiSulBa 
»R 1 t-mu BuiB»Six-S' R R 3liHufBSLS[R 3 

(7) n 1 0«l#ff5 1 OM P U 5 3 [C&'L'TfjIBXx'y X 
(DT'IBItLTl'fcSLiSR 1 <kfjiBM2 0^tl5 2 *'6 
§11L/t»giX-S' R R 1 .k^ikS^L. -BrLTt'^J® 

m2£0Bg^<kl C5 6SO-'^tV^fii;^/cm2® 
«S5 2^iE^S^SI<klgII-r5o 
[0 0 4 6] (8) XX'yX(7)i:ra»(C. f^KOm^S 
2©M P U 5 5 (Cfcl'TijIBXX-y X(2)7-IB1tLTt' 
/cgiaR 2 i:BuiBm2<0«f|5 2*'e§^iLfc»*IX- 
S'RR2i:^ik«L, * 1(7)1® 

^[k I c 5 ARu^ti^mxrcm ^ (7)«ti5 1 

(9) mi(7)Bi^fkl C5 4lCfcl'T. MfBXX-yX(3) 
TIBULTfcl'/taiaR 3 (kBulB^lltx— S' R R 4^ig 
ZZT'lt. it 

!SR 3^±te(7)3 2 e-y h. »gix— S' R R 4^Tffi(7) 

3 2lk''y l'i:-r«r-S'i5JII®K (6 4lk''yh) 

•rSo CCDt— S' fEJMaKtJ. 2 •k>(7)gLlit<7)iie'& 

T-S5CDT\ B#S. IP'S. »f/c[C5VX7x[c4fiEl5rtl/i: 

[0 0 4 7] (10) XX'yX(9)i(^iHUc. *2c7)Bi^<k 
I C 5 6 tCfcL'T. MIB^^iHx-S' R R 3 tmBX^y 
X(4) T-IBIt LT iSl^fc^Lm R 4 ^ C t T'X- 

±IB»SIX— S'RR 
3^±te(7)3 2tk'-y h. ±IBXX'yX{4)7'fB1*LTfc' 
L'7cgLI![R4^Tte(7)3 2tk 'y h S'fiiS^K 

(6 4lk''yh) CCOX— S'i5ill»t.B#$(7) 

[0 0 4 8] XT'yX(7)Sy'Xx-yX(8)T'(7)ffl 



S(7)^ffiii'tjS«] XX y X(3) T'ifiEzrn 

/i:a»R 3 <kXX'y X(6)Tlf8tl/i:»)iX-S' R R 3 
tli-SjU XX-yX(4)T-^^TtnfcSL*ifR4i:XX 
y X(5)T1#6+lfc5^g|X-S' R R R Z 

tlcrs^(OT\ XxyX(9)sy'XXyX(1 

0) K Ii-m.t^z t 

[0 0 4 9] (11) m^<D^m5 1 (7)S 1 (7)Bi^<k I C 
5 4lC33t'T. MPU5 3!b'6)MetlT<?)XPy<7fk 
?tl/cXXS')US^'F%lm j (6 4t:'y)-) ^±!BXXy 
X(9)T1#etl/cX— S'I ejMII K ^ fflO'TBi^^k L. m 
6+ifcBg-^3tc j «-m2 0^S5 
fe2ir-C^^T£DX'XS';l/S{'^!ti!5^3S«Li^ASSTlS 
vmto 

[0 0 5 0] (12) XXyXdDtcmLT. miOiWt 
t§ 5 2 (7)* 2 £7)Bg^(k I C 5 6 tCfcl'T. m 1 CD:^S 5 
1 6'^i(iL/-d®^(k?tl/i:±fBX-XS'7bS['^!KilC j (6 
41k'yh) ^gflL. ±fBXXyX(10)Tl#6nfcX- 
S'IE)g»K^ffll'T«^[kL. ^#6tifcXv’'S'7US(^%I 
mm j P U 5 5 C(7)[g^[kli±iBX'>''S'/U 

Sf«C j 1 0«S5 1 *'6JMfi^nT< SPgUiiS 
yjifo 

[0 0 5 1] Cl(7)cfc7lcLT. IIJifi<7)Jf5<i 1 (7)Bi^(kg 
m -i o^mm 5 ^ tm 2 <Dm^ 5 2 ?s-ciSM.m 
uEt X— S' SSJSii K (7)«^( k <k X- S' (OBg^iiffi t my 
J-X±(7)W0^*'6RB66'*J:3li:. ±IBIISg<7)ff5 
ltl1(7)Bg^(kg«tt. 

[0 0 5 2] mi(7)1t^(i. X-S'lE)2IBiK[iBf^(kl 
C(D|7ggp{cS^[c«il7tnTi'5ir<!:T'S«o 
it. Si (7)«is5 1 *^fii7i5Bi^fkg»T®n«; X- 
S'lBJMilK 2 ^C7) 

X— S'^ in-6. aiSR3i:»g|X-XRR4(iiXT(7)^ 

• ai(R 3tt. S 1 c7)Bg^(k I C 5 4(DF»ggPT'4fi)6l?r 
n. 9i-si5t!:aj2)?tiTfca-r; 7i-a56'6Mi6^L' 

[0 0 5 3] •SJ*SX-XRR4li. Sl(7)Bi^{kl C 
5 4(7)|79a5T'4fiE (SJSI^fiE) S^gPlcai:)3?nT 

fce-r\ 6'0. 

zti^coztiz^^J. X— S'fe)2^liKtiBg^(k I c 
p»gidsa?n«)(7)7\ Bg^7;ud'j XA 
;l/d'J X2:.D <!; LT4^M?tlTl'«t.(7)^S^ffl Lfc<k L 
Tt. S 1 C7)«[S 5 1 SUM 2 0^§ff 5 2 F^tCfett^Bt 

[0 0 5 4] m2CDWmi. Bi^(kl C|7gl!;^46en5 
itSS«fiPS©t(7)[cg465^aTL'5c:iT'^ 
SI (7)«ltl5 1 6'«;^^Bg^(kg«T' 
«tlW\ J.XT<7)SaSlSv S 1 (7)Bg^(k I C 5 4<D^<r>m 
IS. fip-6. MPU5 3[Cj:-pTSII?tlTl''5o 
' aiSR 1 (7)^fil6 
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• SLIif R 1 R R 1 t(Dtm 

OS ‘J. I C 5 

$ <^6%L'<fc-5lcSBlS5-tlTl'So c;n6 2 0<3!)®S 
(iv ti#^S(7)lgE(Cgg-r-5t.<7)T'^ys 
K0^^(CiIjgWlctiK-^LTt'St\ tct 

Xs iHneSQS*'! I 

T^iE^L.i:3<!:LTts ^ 1 1 lcfy^^t,/c 

3&3b\ 

micom^s 2f'ico9^\yy'jT-'—sic2izicit^iy 

X.IOXx—Jf R R 2<D#fi2(d:Bi^{b I CF«gTlTort' 

5o 

[0 0 5 5] I212{i. miOBi^fbl C5 4<D/\-K-> 
m2<DBg^fbl C5 
6tl^?ig(7)/\-Kb7x7il1iT'SiIT-?5o ^^\/ 
Fg|J6 1 (i. I C 5 4<7)rtgP@KtC^y- 

HI?*'e7’^'-bX-r?)fcA6(7)Pi-<OAai:^<K- hT'^So 
SL3SSfiKg|56 0[±. 3 2 tb '> FfOgL^iJR 
[0056] SL8i*S«g|5 6 2 fi, gLJSSfiggP 6 0 7'^^ 
7^X/£fi,liR3?'«*#-r5IBttlHlK7a6S, iisg^gP6 3 
iLU^S^rtgP 6 2 [C^S*rtS-tl/cai!SR 3 ^Tffi 3 2 1' 
-yhi:L. 51-gP I /FgP6 1 3 2 K' 

'> hOiT-y R 1 ^±ffi3 2 tT'y F <t LTlg^-rSo 
[0 0 5 7] iSII^S^S*rtgP6 4«. ^46-^A6n/c|g 

iIIIS^«jrr«IB1t0K7S«o X>r-y^6 5. 6 6 
(is "?-il^:h.6 4 tb'> hilii<7)3 AT] 1 
+7s 6 4t!''V hls0 2AT:l 
«o E^3a6 7(is Bg^7/l/d''JX'/^E{CScS<llg^<b 
IhIK7£5o X4'7^6 8(is 6 4 Ib'y MSCD 1 AT] 3 
ttiT] t 7/1/5^X b •? -iT7$ 5o 
[0 0 5 8] »Si®6 9(is X-<-y5^6 8 6'ea[T]7ti 
ft: 6 4 tf'-y F x-X«-±fi3 2 tf'y F R R 2 iT{S3 2 
Ib'-y F R R 9 

(is 6 2 n/cgLIS: R 3 ^±f4 3 2 1; 

■y F <!: Ls »8lg|3 6 9 75?SI7 ilft:5^Six— Jf R R 4 :& 

Ttt3 2tb''y FiiLT^'a-rSCiiTs x— J^gJUUK 

[0 0 5 9] X— Sf|SJg(giKtS*rtg(!7 0(is 

laKSEfiKgPS 97SfiK?tlft:x— 
iB1SlH]K7««» ?>;(Cs coil2{c,Ts7iift:§«fieSJ!l 
*’'0 1 (C/T^?+lft:^(Xx'y X(tfct'Tl'6'(ci!if^-r5(D 
01 c0Xx>yX(3)(cfci'«T(is SLIKSfiEgP 
6 0(iaii(R3^^^LTSL^J[^SiWg|56 2{C^SttU ^ 

^gP6 3(i^(DgLiSR 3<bT1-gP I /Fg|56 1 5-TFL7A 
T]dii«gLi!SR 1 .b^^g^Ls X-f-y^^O 5:&TFL7E 
^IS67(CjMS. EM3$67{is lSHas^S^aJ6 4*' 
6X4''y^6 6^TFLTiSEiiS5g(TIX*J, ^tl^m 
(-'TS-&gP 6 3 6'e tliT]5'ilft:ig^r -• 5? R 1 1 1 R 3 ^ 
Bg^^bLs 1^X<-y^6 8SWgI?l/F 

SP6 1 ^^LT^2®«IS§5 2(caiT]-r-5o 
[0 0 6 0] 01(7)Xx'yX(5)St/(9)(!:fcl^T(^s ^ 



gP I /FgP6 1 ?T>LTAT]7+l5a^XC 2(iX'r-y 

5^6 5^^TEPIIS(CAT]Tt-nSo E|||jf6 7(is ISU 

^S^S*rtgP6 46'6iSliE^S^§(TIXy. 
a^XC2^Bi^{bLs X^'-y^O 8^T>LT»SigP6 
9lcili5o 5F8i®6 9(is R R 2 

Six-:SJRR4(CiFS|Ls R R 2(i^g|5 1 / 

FgP6 1^TFLT91-g|5(i:|ljT]U 5TSix-X R R 4(ix 
-- ?lEiMliK^^ilcg|55 9(C3M;5. x-XKiiMliKtfiESP 
5 9(is gLSI;^g*rtgP6 2(t^giN^S-tlTl'ft:S5L»R3i:» 
SlgP6 R R 4 

5c:<b7x— s*ejii^K^4fij6Lft:«(Cs 
mmm oiz^mt^. 

[006 1] 01 0Xx-yy(11)(c;JJL'T(is E^if6 
7(is I /■Fg|?6 ISUX'T'yf^e 5^T>LTAT] 
j ^r-:SfS2iaK^SJ|fig|!7 0 
(C«*ft7ilft;x-:SfeiiSI^K:&fflL'TB§^<bLs 70iK 
*C j :&X-<-y^6 8Sy9Fg|5 I /FH156 1 ^T>LTm 

20«S5 2{cttiT]-r5o ^33s HSg0ffJ<ll1 7(is SL 

ft\ *?SR^(i-?-+i6(c|!g^7ii5t07(i%l\ mx 
(is ±IBXx'yX(5)(cfeO'T3 2 Ib'-y F0SL1KR 1 t 
R2^^^LT6 4ti'-y F<bLs Cil^6 4 Ib 'y FBi^ 
^ISE(CAT3LT6 4tb'-y F00i^XC 1 55fc46Tt' 
c:0®»(is ^JA(i's €-gLDf^6 4t;'-y F<bLs Bg 
2 8\^y 

F0Bg^XC 1 UTtctlV ftcftcLel 

0«^(c(i0i^xc 1 6'6iL»R 1 {zmt^^^t R 2 
(cggf (C w »T Si-a-^b c: t 

^<D15^<D lO,tLT(iCBCt-F'0i:7 (CjSti:£# 

ovm(0-f5mt^h^. CBC7-K(COl'T(is ;Wff 

-s ri^^Bg^SiSj 1 9 8 

6^0p7O(ci¥Lbo 

[0 0 6 2 ] sftcs mm(Dmm 1 7(im i ^si^^b i c 

5 4(iBi^^|ifEft;(T^, W,2<J)^mt I C 5 6(i^0 

mmLTl^?>i}\ =frCOCt^mi. ±aLft:cfc3{c*5g 
W04s:H7(i*l\ OS^Ts ^-tlSBi^fb I C 5 4s 5 

6 (CfF§?ti;50a53^^S-)f>Pi^fb7]Fd'T XA0«*SH 
.kroMjKcfcbTj^^-rtKictl'^iIT'ife »Ts tdJx(is 

d i; XA E ,!: d 'T X A D 

0S]^«-m#Ls gLlif0Bi^<b(cei^7;FdiTXAE 
=&s tS#«^S*'e«^^^^i^ft:1f^B0^t^(ca^^}$.7";^d 
'TXAD^ffll'Ttil'o *5gB^(is 5? 

L T I' 5 « ft' 6 

[0 0 6 3] Sftcs 1 (Cfct'Ts m(is X 

x-yX(1)70glli(R 1 <D^m%^(r>Vg^it I C 5 4 
I^TlToTtict'c C0C<i:(Ccl:‘Ts mi0Bi^[blC 
5 Ls i:»T$ 
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osy. mmom 

m 1 T'^i^ aiiTR 1 am i <n^mt i c s 4<D^i-gi5T'ft 

COSLItR 1 IcSrJl'TH 1 COPi^fb I C 5 4 
liBg^XC 1 CltDBi^XC 1 Si ®Bg 

^(b I C 5 4(DF^gPT-4^?^a/i:aiil[R 3(0mV^§lf 
tLiLiSR 3*^+5^lC5>'S^'ASfilT-35:l'li 
s 1 ovgmt I c 5 4 

t^CtmmiCtiriTLtOo 'iitoT. SLISRKO^ 
1 oismt \ c5 4piz-noz.tT\ nLtm<rc 

(mm(0Bm2) me. ^ue^^;^ntcmm(Dmm1T 
(DX^'yZf(Dmmi:LZ. nmcDBrni^mTo ^(D 
^tcJ\-Fo 

:LTmmtLTi,m2ie7rs^tircmma^mm'i iisisjg 
mmmm i za^^’ u>s>'x— s»^Bg^(bL 
J&l'T- UX<K>Xr — Jf ^Bg^(b LTJiffi LtcHK nm 
mm 2 ZM^^ u > -? L ux.lf VX X 

— SJSrBg^fbL^l'T'iKifSo USSCD^Jg 1 iitiSf 

[0 0 6 4] H3 ti, 

Hi 1 <bH2C0iaS7 2F^T'ffii;iSIiE<bx— 5* 

^(b <b T - ^ O 0 i^)i(f <!: 5 

2izisif^iami/-'ryx^7ntmz'&^o lasT-iis 
m 1 0«JS7 1 6'eH2 0«IS7 2{Cx>>^f;USf^!t!Slm 

[0065] MPU73. HlOBi^(bl C74. MP 
U 7 5®O'S2(0Bg^^b I C 7 6(i. mmOBm 1 ICfc 
(t«MPU5 3, HKDBB^^bl C5 4. MPU5 5S 

0 =H 2 OBi^fb I c 5 etej^fSL. ffig#)® 0 +sii^RS 
I'T, j\- \^'2j:Tmi^me-oi^zitmm(DmmT(om 
IXT. m3[en<■^E^atzX^''Jym^\z 
'^■oz. mmmm2iasif%«§^it^mcDWjif^mm 

[0 0 6 6] (1) HlO«^tff7 1®MPU7 3lCjit'T 
SLiSRl (3 2tb'>h) ^SfigLTs 
Hl(7)«tff7 KDjSfflgp (l217-^i/X^LT%C') 

T^ H2 0«St|7 2[C3lS(S-r«o H2«D«IS7 2TttC 
tl^H2<^Bi^(b I C 7 6 lemto 
(2) m2(DmSS7 2(DMPU7 

SmfcL'TaigR 2 (3 2 ti''y I') I31Sf 

^tt^icM2 0m^7 2(D'£msii (mz'tt^^Lz^ 

U') ^ntz. Hi (D^#ff7 1 Hi 

7 1 T'liCtl^H 1 OBi^fb I C 7 4 lC}St. 

[0 0 6 7] (3) Hi COBi^fb I C 7 4lCfcl'Tv US 
R3 (3 2 (:;'•> h) ^^^LZ. ^gPJ: 0 
35:l'^JsElctS*rt-rSo HijiBH2£D^Sg7 2*'e§(f L/c 
aUR 2 iiHulBaigR 3 EBi|g-?'Bi^(b-r 

«o Bi^fbtCtiH 1 <DBt^(b I C 7 4Sy'S2<DBg^^b 
I C 7 6T-i^46^tJitt®j#LTl'.5ifeiSfficDigSE^S^ffl 



I'So H 1 (DBg^fb I C 7 4ti. Bi^fbSHC 1 (6 4 
Ib'-yh) ^H2 0i[g§7 2(ciM(ir^o 
[0 0 6 8] (4) X^yX(3)±IWmie. S2<DBi^(b 
IC76lCfc'L'T. aigR4 (3 2t:''>f-) 

z. ^sn.t:urx-txz^rsi^mmiemt^. mibh 
1 <Dms§7 1 A'esfflLfcaiSR i tmBSLS[R4^!^ 
^Lzsfimz/i'iju XU D ziM.mtt^. 

H2 0BH-^(b I C 7 6ts. 

HC2 (6 4ti''yh) ^Hl ©1igg7 UeJ^frrSo 
[0069] (5) Hi <DBi^(b I C 7 4 iCfcU'T. tulB 
H2®Bg^(bl C7 66'6 §(IL/c«^XC2:&huIBE 
g|»^ffib'TBuiBISHl^ST'Bi^fb-ri)o ^0ilSH(7)6 
4 tf'y hx-^t05-5±(43 2 ti'-y R R 

1,Tf43 2tr-y h^»lix-'JfRR4<t-rSo ^LT 

»Stx— R R 1 (iS 1 <7)^SI7 1 0)M P U 7 3 lC}g 
U -*»1!ix-^fRR4«ii-ti:tu?t‘icSiOBg^(b 
I C 7 

[0 0 7 0] SK H2(DBS1^'fbl C7 66';5t' 
lciEj®^‘£,<7)T'^ y UiSSESS 
Us r r i nmsM ^ 0ms§7 1 ©m p 

U 7 3 ft’iSfig L R 1 tlWUie^fJs buK^SIx- 
^RR4tiS2CDBi^(b I C7 6*'ifigL/caaR4<b 

(6) X^yX(6)±l^mH:s H2(DBi^(bl C7 61CJ5 
t'T. buIBH 1 ®Bi^(b I C 7 4*'6§(iL/cBi^3i:C 

1 ^MIBi£S1$7/HfyX2AD^fflt'TBuiBiSEiaST' 

^(0!^M<D 6 4 tfy h ^'—?C0±ffi 3 2 e 
-y R R 2. T[43 2 ti'-y 

RR 3 tT^„ ^LZ^mr-XRR 2 (if^ 2 (DmSS 7 
2®MPU7 5li:;]SL. ? R R 3 (iTi-lCtli 

^■ricH 2 OBi^fb I C 7 6F^07i-g|5*'67'7-tlXT^ 
&t'^aiicis$rt-r-5, 

[0 07 1] 5:fc\ SK H2(0Bt^(bl C7 6?b'!Sl' 
(ciESi^tOT-S y 1 ^ (iiSEas 
Its mB^mr-x r r 2 (Ahuibh 2 7 2 ® m p 
U7 56^4fi)6L/ca»R2i:|IU;[e^y. SuiB^Six- 
^RR3(SHl0Bi^^bl C7 4A'4^igL/-caiiR3<b 

(7) H10«S7 1(7)MPU7 3[CfcL'TBufBIB1iLT 

I'fcR 1 2:0U!BH 1 (DBg^lt I C 7 4*'e§tt®(o7i:5J 
Six— ?R R 1 H2 

(DBS^it I C 7 6St):S2(DBi^(b I C 7 6*'i#^tlfc 

H2 0«Sfg 7 2 :&iEa*^Sg<biSH-r5o 

[0 0 7 2] (8) Xx'yX(8)<bl^1*(C. S2<7)^tl7 

2 (DM P U 7 5 (Cfel'TSulBiBIt LTL'/i: R 2 <!: buIBH 

2(DBi^(bl C7 S(RR2^ 

ik«LT-SftTt'5Ji^(C(i. HI (DBi^fb l C 7 4 
StfH 1 (DBg^(b I C 7 4 m$nrcM 1 <D«I?| 7 1 :& 




(12) 



# 10-51439 



(9) m 1 I C 7 4 F*gT-HuiBgLiSR 3 <tBuE»!8t 

X— ?RR4^fflL'Tx-^fESiiK^^^^-r5o m-c 
(6 4k'-yh) .bLTl,' 

i.o 

[0 0 7 3] (10) ^2ong^ 

fk I C 7 6 F»3T-huIB»S«x— S f R R 3 ifjiBSLISR 4^& 
ffll'T® 1 0Bg^^k I C7 4iI^»lCT— 

0T(i?X:^(7)^e^^r-^IE)i^K (6 4^ 
•y h) iiLTl'So 

(11) mi ®«S7 1 ©mi 0Bi^(b i C7 4[cfci' 

T. M P U 7 3 *'6S6tlT < -y '?<b?tl/cx>>’ 

j (6 4 t'-y h) ^±IBXx-y y(9)T1# 
6 +lfcx— JffeJSSlK^ffll'TBi^^bU ^#6tl/cBg^ 
31 c c j 5-m2©«j^7 

^T©x 52'^ S vm V Mto 

[0 0 7 4] (12) 7 2^(11) {cm LT. m2©«l 

fg 7 2 ©m 2 ©Bi^-fb I C 7 6 (Cfcb'T. m 1 ©SItl 7 
1 *^jMfflUfcii^(b?nyi:±SBx9'^;USff!teC j (6 
4lf'yh) ^§fSU ±SBXx-y7'(10)T^#6tx/i:x- 
^ sjsig K u If e ;u*f^!|jsi 

mmj^MPU75 {cj^;5„ C©«^<b(i±tBx->-S»/U 
*fFi|%c j *^m 1 ©^ts7 1 *'6jSffl^nT< -Sligo** 
Oil-To 

[0 0 7 5] d©cfc^(CLT. mffi©ffJ^2©Bi^*bg 
aiccto. H)i©fi5ftii©ii^<!:i^«i{c. mi©«ti7 
1 <!:m2©«|g|7 2P^T-tSSiSSE2:x— ?e)MiaK©ft 
mibi:x— Si©Bg^jifii*MTfcni)„ H^i.fr 

cfc 5 tc, :$:m)!ig©)f5[B©lig^( bSSa t mS(S©fBtt 1 © t 
©i:{i/N-F':7i7*M{cfc't'T-aLx mmmuM. w 
■6 . s/ \- K -2 1 i: 

m^Zs *maiff^!K©l^i^[bsa©1t^a^ 
^©SJ15ffJ{coi,'-ni, lll5S©)15®1 ©i®^<b(^»©c: 

3 ) ix±omm(Dffm i &zf 2 ©Bg^*bs 
a[c{SJ.XT©«)i,-IS*'*5o 

( 1 ) jiX:&©^S{cfcL'T^*a?'ti 2 ^©gLSai^^^iE^ 

tl. ^©-*{iiSKEffl{c©?y.ffiffl?ti. f6©-*(ix- 

^ mmu K {c tx :So 

(2) 7-iSf$EJMIiK©afi2{cffiffltrn5gLS((i^-©S^ 

Id. iSiIffl(C®ffl?tl«£Llj{(S:Bi^(b I Q<0^mz^ti 

[0 0 7 6] c^aicj^LTx 
©Bg^^bsaii. 

tT^—simmm(o^is,m(Dmyj(Dsmr:mmt^. cti 
{i, m«g©jK«isy2{cikA:7^ Bg^^b I crt7'©a 
i»Sfi)6©fiji5-S:js-rs.fc46T'««o ^tc. mmt 1 c 
©F^®{cfctNTISIiE©/-c«)©gLli{4fi)c<!:J±«J5QS5-*7 
Oo fiP^. mSS©ff5ffl1Sy'2i:tiJlL. x-'SJfBJSii 
0^^©3^^6-riSliEjaiSt§46TBg^^b I C©rt®0 



KT'*t3o c:^{i^ ±a?L/cJ:3tc. Bi^-fb I 
[0 0 7 7] i2i4(i. 

mi ©as 7 1 2im2©as7 2F^r*ssigEi:7— s? 
i£isa©ttmfb ©Bi^iifi mmcomm 
siztsifmmiy-'r'yX^Tjkt^ZSD^o I214f(i, 

m 1 ©as 8 1 *'6m 2 ©as 8 2 {CT'7'^;usf^!itom 

[0 0 7 8] 4:m)5s©j^Ri{cfct'T‘t. mmoB 
«1Stf2 2:|iia{C. =&aS8K 8 2lC(i^en/c:$: 
^^ic^SBi^fbgatix :^^<5J{tTMPU8 3. 8 
5i:Bg^blC8 4. 8 6<!:*'eafi)6^tl5o L*'L. 

M P U 8 3 . 8 5 j ^Bg^(b I C 8 

4. 8 6{C;«-r/i:{t©atg^m/i:-r©T\ HKB^ICIJ. 
2|s:5g^{C®;SBi^{bSa(SBg^fb I C 8 4. 8 6(Dh-t" 

[0 0 7 9] mi©Bg^(bl C8 4SI>m2©Bi^fbl 

c 8 6 {*. mmm ^^m2t. na. 1 9 <y 

I CT-SSo WT. il4(c,^^nfcXx'y7#^{c?tfo 

(1) mi ©Bi^fb I C 8 4{cfctNTaiSR 1 
IB«r^<!:<bt,[C. Cin^EM|jj7:'Bi^<bLTmi©a 
S8 1 ©5^(135 (I^TIi^rLT^l') ^ifLZ. Bi^3t 

c 1 ^m 2 ©as 8 2 tcjMdr^o Bi^^btciim 2 ©bi 

^(b I C 8 6 i^<i6*Ji(C«J#LrL'^^g®©|gliaS 
m2©as8 2T(i§fgL/cBi^3tc 1 «-m 
2©Bi^jbl C8 6{C;«-ro 

[0 0 8 0] (2) m2©Bi^^b I C 8 6T{i§fiLfcBi 
1 ^a^^a7;^P'0X/.DT'^t^■^bL^I^XR R 

1 ?•*# -So m 1 ©Bi^^b I c 8 4sym 2 ©Bi^(b 1 c 

8 66’iiE51©t©7'S5Ji^{C{iiI©1*^3t R R 1 {igu 

iBaiSR 1 t-mt^o 

(3) m2©fli^fb I C 8 6(CfeL'TSLISR 2^^^LT 
IB«r5<!:*{c. Cti^SufBa^XR R 1 .bie^LTM 
8BasS)ft7;l/zroXADT-1S^fb-r5o ^S^lcl^BuiBiS 
tiEas«ffll';5o m2©BS^1bl C8 6(S«1f32:C2^ 

m 2 ©aS 8 2©j^1fg|5 (HT'IJ/^LT^l') ^ffL 
z. m 1 ©as 8 1 {cjsffl-r5» m i ©as 8 1 z^z 

tl^mi©BH^(bl C8 4lC;rTo 
[008 1] (4) mi ©Bi^^b I C 8 4 {Cfcl'Tli. BU 
8B^^3tC 2 ^0ij8B E g0lilTBt^<b L. 

7—? R R R 1 i»8t7— ? R R 2 {C^git^o 
*17—? R R R 1 (SIEa^aSl;©-^'0®{0©Ji^TS 
tuf. buSBS^XR R 1 StfSLiSR 1 <t-S{-rSo Sfc 
5^S7— ? R R 2{iSu8BSLIi{R 2 
(5) m 1 ©Bi^(b I C 8 4 F»g(CfcL'T. Bu!3X7-y X 
(1)7-8BaLTl'fcgL|j{R 1 d:BuIB»*i7-? R R R 1 
<b^Jt«JL^ -a-rS)ii^{c[im2©Bg^fb l C8 6S 
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O-m 2 I C 8 6 2 (OmU 8 2 OZES 

[0082] (6) Si OBi^fb I C 8 4 tCfc'L'T. buIB 
5^817='— J?RR2^sulBEMDrr0f^^bL. S2®<itl 
8 2lC)^fl-r5o m2(7)a8tff8 2liC<DBi^XC3^S 
2 0Bi^(bl C8 6lzmt. 

(7) S2(7)Bg^(bl C8 6lCj3l'T. 0U3BBg^3tC 3 ^ 
iuSBiS!$}S7/bd''>IX'lKD71*^(bL^ «^3tR R R 2 

[0 0 8 3] (8) S2(DBi^(bl C8 6[Cfc'l'T^ SulB 
Xx-yX(3)T'iB1SLTl,'fcSLIi{R 2i:HijSB«^XR R 
R 2^tk®Lv -KLTl'^Ji^tClJSl OBi^fb I C 
8 4St>'S 1 I C 8 4 1 8 1 

OIES'tt^iglE-r^o 

(9) S 1 OBi^fb I C 8 4lCfcl'T. HuiBSLIiJR 1 tm 
iB»si X— j! R R 2 zfz'^—n Kmm K ^ 

[0 0 8 4] (10) S2(0Bi^{bl C8 6[Cfcl'T. S5 
SSa^XR R 1 .tBuiBiLlfcR 2^ffll'TT— 

(11) 8 1 <75S 1 cOBg^fb I C 8 4 tCfc'l' 

T. M P U 8 3 6'e)M5tlT < 5X'P •> X^bS-nfcxv*' 
(6 4tb'-7h) 5-±IBXx'yX(9)71f 
6+V/i:x-'?ejgaK^fflt'TBi^<bL. Zfe+lTcBg^ 
xc j 5-S2 0^s8 2icsfi-r5®s^, 

L*lx« ST-Jft y Mt. 

[0 0 8 5] (12) Xx'7X(11){Cj^f5LT. S2<7)«l 
S 8 2 (OS 2 (OBg^f b I C 8 6 tCfcL'Ts S 1 <0«lf§ 8 
1 *’=S«Lfcfli^(b^nfc±iBx5>'(S(1bS(^ttC j (6 
4ib''>h) ^sfiu ±fBxx-yy(io)Ti#en/cx- 

mm j 5M P U 8 5 iI(0«^<b(i±iBx-X^;b 

s#%ic j A'is 1 0^S8 1 *'ejS(izrnT< 5®yiis 
yii-To 

[0 0 8 6] ccoctdicLTs nm(DWM3(Ds§mm 
aic-tUs m^<o 

as? 1 iS2(o«s7 2rsT-ifSM.mmt9^—iimmu 
K(0ft^^b<!:x— S((0flg^ii{fi:?bMTt»n5o 3&fe\ ± 
!BXx'>X(1) (2) (6) (7)[c3b'0'T(3: 1 O(0gL3$(0Bg^ 

[bs Xx'>X(3) (4)lcfel'Tti 2-:3(OiLiSt(Oie^(OBg^ 
(b^t7-7TL'5o 6 4d-7 hfi(0E^atiSa}ft7"yl/d' 
y X/. D §gLlif=& 3 2 Ib'-y h <b L 

ij#tCOl'Tli^y03 2 fc'y HOA73ti:@^©3 
2ti'-y f'0(S^/\TV>-i^'-r«<!:ctl'o 
Tffi3 2 tf'y i: U ±(*3 2 tl'-y h^il^W{C^T€P 
S/-dg#lC0L'TliJ|g^Lfc6 4e-y 
h ^^(OS AXlf^ <b <t 

[0 0 8 7] §SL3S(0ti''y h»^fg(06 4t;'-y K 
0u#(i^(DSt^«[cA:^U 
2 HI** y il LTfflt\ ^J;i«'C B C ^ 



- K(0<fcdldiSK(OSSBi^^^T^«'<i:L\ 
mmomm 3 icfct'Tii, sffl( 0 ffj« 1 sy '2 
y. ^IE(0/c46(0ill!t<!:x-^fiSa(0^tW(b(0fc46<0 
f5L3$td:Mffl?nTl'5o ISIiE(Ofc46<OgLli[^fi2 

■IPISiiEcO/ciixObbSJSaSJiBi^fb I Cp^TlT^^nTL' 
ttfoT. gLSS(i^(0SST{iBi^(b I ccomciin 
^l'/c46s Bg^fb I C^)5?I^S<!:LTffil'5i5j|E[cWL 
Ts .fcye^T'^^So Sfc. C(0C<»:[tJ:y. SgL»<0 
Ib'-y 

mmo^m^) ;xic^ S)»(ojf5fti4(c«:s,Bg^^bga 
icoL'TiK^-rSo 

[0 0 8 8] Bg^^b I C(0P V/\°-> h(b^ii 

mLTcmmmmT'So y . -:&(piisEE^fi(ffl lti'« 
StE. ±IBSS6 

(offj^i~3iffiji-r«„ fiu Bg^T’/udyxAEs 
tJ-^-03?$^7yUdy XA D ti^MtciJ-tlTC'5 C <b ^ 
M«<!:-r5o lasti. S1(0«I3§9 16'6S2 0«3S9 
2[Cx5>'^i/USfF!|iim j ^ej^t-51i^(0SQS'>-X> 
x^/T^rnTSSo 

[0 0 8 9] nett. SKOBg^fbl C9 4(0/\-K'i7 

1 X'P 'y ^7 

(1) it. S 1 (OBi^jb I C 9 4(Oaiif^jSg|5 1 0 1 li 

^fiEU SLIi{^S*rta31 0 2lc^SiJi*it-.5,!;WA Tt-gp I / 

Fgpi OO^:H'LTS2 0«SI9 2tcjM(fr5„ 

(2) S2(0Bg^^b I C 9 6ti. SflLfcgLIER 1 (Cj^L 

T. 1 I C 9 4 i:ttii[CF)T=S LTO'SIS 

ESs«fflt'Ta^(bu zfsnfca^xci^SKo 
as9 1 [cjMff-r-So 

[0 0 9 0] (3) SKOBg^fbl C9 4T'(i> EMifl 
0 6tt. OOSU'X'T'y^l 0 55^>L 

TSflL/cS^XC 1 {C5WLT. ISESISifSilrtgin 0 3 

U:^46^S*rtl?tl/i:±iBiigHas <b(^ 

-fb-rSo 'E-(0iig^^#e4^/i:x-^RR 1 (J, X-T'y^l 

0 7^gTJ±»gm 0 8{c)Men. gLijifs^gp 

1 0 2tc«JSJ+iTt'/i:iLlifR 1 

[009 1] (4) ^(OSgS-KLTl'SJi^lCtS^ S2 
(0atS9 2WiES^«IST'^5<!:iSliT^«(0T\ J±R 
gpi 0 8tt. iLliflS^rtgin 0 2ldSJ#^tlTl'/ciLli(R 
1 *'x— SJeJMIliiLTfflO'enScfc-plA X-<'y5"1 
0 4=&*ijffl)r«„ 

(5) EggDf10 6li. MPU9 3A'e^i-g|5l/FgB1 0 
OStEX'T-yg^l 0 5^igTi^6tlT<Sx'X-S!;US(^ 
timjtcWLT. X4'-y^1 0 4^;ST3g6nT<-5iL 
SR 1 5fflL'TBg-^■fbL^ X'T-y^'l 0 7SO'^1-gP I / 
Fan 0 0 5^^>LTS2coaS§9 2(Cj||(I-r^o 
[0 0 9 2] (6) S2cO«IS92(OS2 0Bg^<b I C9 
6{C33t'Ttt. SI (0«S9 1 *'6jMetlT^/i:Ti7^ 
lUSfFftC j tcMLT. ±fBXx'yX(2)T-g[IL/cSL 
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I0(R 1 tteti/c 

TV^Iimi'P/lIimm j P U 9 5 C<Dcfc3(C 

LT. HfflOJTJ«1~3<Ol§^<J:y 

iSEirT^— s^eji 

[0 0 9 3] * 1 ®^S9 1 

*'6^2£Dlj|S9 2(CJiim?tlfcgL»R 1 *^^-C0S^x 

"J-cOx—Sie 

3Sa^aofcS3#*’!x>>'^;USfp!t^!lC j 

<bLcfc-5<!:LTt. ±)zELfccfcdlcBg^7;Udri;XAE 

7\ ^oa^lifiE^^jL^L'o 
[0 0 9 4] S/c. -?-0m3#*'ia!-&OJ:U'gL3[i[R 1 ^ 
^Jir ^ d <*; Tn^Tii^'J XL>^»if! L<t -5 (b LT 
t. mtcts^mR 1 ^SLIi^S*ftgpi 0 2lCifSlrt7^50!) 
ligLISSfiKgP 1 0 1 rclfT$> ‘J . 21 COM 1 I C 

9 4<^^g|56'6ifffc^gL»R 1 ^SLU^gegm 0 1 [Ctt 

Z<Dj^olt. XASU'-?-C0j£S]ft7)U=r'J 

6 «; -5 j&h v 

i^'P h^fli^ib I C[cd:oTtiSE<!:x— 

<!; Bi^iift ^Hiir § C <!: A'7t 
[0 0 9 5] Sfc. ±tEnmOBm 1 ~4[Cfc'l'T. ig 
Has5-0i^{b I aciS^-Ti. :^mtL 

T«WT*'ifSLl\ ISEastO-gBtiBg^^b 

I COSajtB$lc^4i)IS^L7fc^s 
it I C<Oiajg^tC»S-)Z,tj:&;S7S5o ^«sWtC(iv |g 
EaS^S*|<|g|16 4CD-a5(i. igEaS<D-gq:&^i6»# 
J^/ufc7X'?R0M7«^Lv Xp^'57 

ROM 7«fi)c-r ^o 

[0 0 9 6] CtllS. -^XiPROMajSi-ZmmLrc^-^ 
g$IW3S:0i^fb I C0f^figOfc46(CA#^^>?!5: 
L'/c46ieS^TS5JS®. <jj\-XJiyi/-T u y'flc 
xs « <t t' ^ x* 
JilBROMO?^7«fiEL/cJi^[Cti. |g 
mo >j / ^'- X X > v/x 7 'J > -^'ic cfc 
«SE^ lS:£tcA#«'^r«/-c46~X*’‘;IAL/i:y^jE 

^ffi3/ca67«5o 

[0 0 9 7] S/c, 1 ~4(DBg^ffi{C 

J3lt^Bg^7/l/p-i;XAOMtt<5iJ<!:LT, 

OT-feoTt, J:l\ 6 4 tT-y 

hOXP->-7lc»SiJL. WIB7-^fi)liaK (6 4tr-y 
h) <!:e-> 

^Xii-r^o §flL/i:6 4k'-y HD 

Bg^x i: X - ^ gjsa K t omm^msm^ t tuf j: 
i\ ctU^:J:oT^ txbOXP'y'Xc^itiJr+i^o 
[0 0 9 8] Sfc, X— ?fB2gaK^|l|^fr5<D71i 

1§:<. ^n67'P'>^C-i:[c. fflt'6tl5x-'?ejsa 



K t gftffliJT'lilSS?- <!: y e Mff L 7 1' < 7^ 

^<DM*ff<D/j:a6[C. huIBE^I![-?>JS$«!7;1/ 
df'JXAD^fflt'7tJ:L'o XP'>^rt(DBg^/^i^^i 
Tt(ca?'<fcSffteBDiBS?a7So7t<i:U\ ^tc. ±iBH 
J6®g5^ 1 ~4[CfcL'7. iSE:^>£<b L77+ U>'7U 
X<f(>XS<DL'< 0*'CDW/T?n7l'^A\ 
7tl6<DfiiJta®6n^l'o ^JA«; IWJ(DBg^fb I C 
T-UM^^mU U>-Xx— Jf i: L7JM(^ 

u jgjs? tifc ux/i^>xx— St .tigEfflyr 

^0S,Lrcmmmo[yXyi(yxr-^ chi' 

3 -V' U >'7VX<K>XS10SIJ<D^J7® ^ 7 1. <fc t\ 

[0 0 9 9] ±iBH)5g<DmSI1 ~4^c^^l^7x 'J' 

tr ^:aK*i«7iSHl.}: Bg^^i«^S^^C^^D: 

/XvLfc*\ S^1f0?$)t<!:^(D/c(!!6lC'i^MD:lHlK)®1i<!: 
W h b- K:tXCD^#lC^ ;g. c: iltiw-? S7t15:L\ 
o7. t.LMPU-'f'Bg^^b I CF<g[C*g7^i.@K^« 
IXTOS^Otdilz. 9-^^ 

siF 0 ^m'i7t?>mrcrj:mik^mmamAt^zt 

7\ Bg^fi(D$^tt^?Sjb75C<!:*^7't5o 
(1) ^-tD— ¥X<D7-vUV>>'x-St^¥X(DU 
X/1^>Xx-St DMcj^lS^jJSn^l'cfc -5 [c-r^ C <>;7i6 

5o 

[0 10 0] m 1 ic5T?n/cm i to^sgs i *' 

ll2<D^||5 2?iSE-r55!lS'>-X>X (Xx'vX 

(1) (3)(6)(7)) (CfcL'7. J-XTOJ:d Xx 
•yX(6)[Cfet'7. m2<DBg^fbl C5 6li. SJSix- 
StRR1^MPU53 [::jM5<D7«^ < . ^-<D»*ix- 
StRR1(cp/T^0$}ftF 0 ^mU ^-cDig^tfe+l/i: 
X— StF (RR1) ^MPU 5 31 cjM-5o 

[0 10 1] Xx'yX(7)[cfel'7x MPU5 3li. gL 
SR 1 <b«Slx— St R R 1 t:^\mt^OZ\tr^<.. SL 
SfR 1 [c±IBX7-yX(6)7ffll,'/ctcD<b|W|US^ 

F 0 ^ssu ^cD^g^^fetl/■cx-stF (R1) tm 
2®Bg^{bl C5 6*'63getl7^/i:x— StF (RR 
1) (b^-ibR-r^o citDJ;3tc-r-5c:<b7\ Bg^XC i 
<b^<DTX(D-gPRR 1 i;6M5JSK^-;)fEtl-SC:<bAM 
t*i^oz\ K5®^xiij¥ics^-rs$^tt6^3S{b?n 
5o 

(2) t-5— Oti. ^vU-Vv-'x-St^^-CDS^x-St 
R)Sa<!: L7ffll'^t'^ 3 trr 5 C <b 7*5. 

[0 10 2] IH5[0^5-nfcXx'vX(5){cfc 

l'7> mi Wflg^fb I C 9 4{i. gL3$R 1 ^^-cDSSx 
—SfRJMaiL7fflL'507«*<. SLSISR 1 tcm^cD 
^^F 0 ^mu ^<D^m^#etl/cx-s^ F (rd 
5-x— StejSa<bL7ffll'^o Xx'>X(6)lc 

fcl'7. m2(DBg^<b I C 9 6ti. aSR 1 
x-StRiSai:L7ffll'5£D7«%<. aiSR 1 tc±fE 

x9'y9(5)zm^fc<totmi:mtSiF o ^ssu 9 
oiismme>titc9-xF (R1) ^x-steiga<bL7 




(15) 



10-51439 



[0 10 3] Z<D^olCt^ZtZ\ 

(3) ^^sas^asi[c-r5c<h7' 

0HC5^^tlfcXx'y:/’(9)(cfcU'T. 
miOBi^fbl C5 4{i. n.^R3t^n9-‘$iRR4 
c:ti6R3. R 

R4tcF/f$0)S}SF 0 L. ^(Dmmme>nrc^- 
^F (R3, RR4) 

[0 10 4] Xx-yy(10)lCfel'T> ^2(0Bi 

^[b I C 5 6 gLIi R 4 R R 3 t^miZ 

iineR4, rr3ic± 

!BXx-v7(9)T'ffll'fct0<bl^US]ftF 0 5S6U 
^(D^mwentcT-'-^siF (R3, RR4) 5x— s«e 
2lllKi:-r«o ca:),t:^lct^ctZ\ 

5o 

W±CDJ:31C. 

5IWlc«5Bg^{b8«ti. 3i^I<D/J';r^Bg^[b I C5« 

«Hg5f#oTt'5o tSoT. 

mm. 

Jg&gST-SSo 

[0 10 5] m7[i. 

n:m\m'y7.T-L.'\(Jimmm^7ntmzta*). vmm<r>T 

cl<D'>Xx 

ut. ±s5nmmmizisif^f^ ^ <Dmmicm!5.r^9t^ 
'(7.'7 i o<bm2<D^siC)^ES-r«ws! 

sssa 1 1 1 scsi ^- 7 ii , i 

1 TtxVX'J' K54'7^S1 1 oT-m^ 

tliL/i:E«iiB*^x-^5Bi^[bLTWaS4S«1 1 1 
[ClEJgL. ^CZ?mm±t^^^X=rhZS>^o 
[0 10 6] 08ti. itx-i'X'? 1 0® 

m^^^sty'n'v<7mz&^. F^'cymm 

1 1 0 ga^^^|s:®SlJ^S15^T■5 M P U 1 2 4 ii. 

B^SKi 1 ^ tomis'fyyyx-xz&^scs i 
□ VhP— 51 2 1,!:. Jt^'yKI 2 55*iJffliLT>tx 
'(y'7^ 1 5A'ewax-^5i^^tiiL*ij{®-r5ss3,ias 
L^jspai 1 2 2 <b. ±^(Dmmmm i ~4 i 
®«S®0i^fb I ClCtsaf^Bg^^b I C 1 2 3t*'6 

wtM^gai 1 ^t^iE'^rxmmz^^zt^m 
EL/t^lc. ^xVX-2 1 1 5 lc|B®?+l/cWi«x— ? 
5Ki(^tbLTai^fb I c 1 2 3i;:fci'TBi^jbU sc 
s I : 2 ';n 1 6^-rfLT^mn^mm-i i ucssi 
rso 

[0 10 7] 09ti. ^xVX'2F54'7'gai 1 0® 

(^®ic*g?n50ss*ig®ffiiii5mr07'*5« Bi^ 
<b I C 1 2 3 li. 1 (@®-> u n vS1g[cffM?nyc L S 
I ZS>V. 75X5^'>-j7T'5-/UK?tlfc75 7 h/\°-y 



-b— 7'®)K«5LTi,'i>o 01 oli. i 

1®«fi)655^r7'P'y70T'®So 1 1 

(i. Sa^^t:®^|J^^|15^^5MPU 1 3 1 t. 3tr-<77 
K54'7gai 1 0i:®jlffl4'>'5i7x-xr^^SC 
S I zi>hp-^1 3 0,!:. ±at®Hl®ff5g|1~4®m 
2®ilS®Bi^fb I ClCtg^T^Bi^^b I C 1 3 2 i;. 
Bi^^b I C 1 3 2T^£^jn/cE«lB!S®x— Ji®[$g5 
^77MPEGTn-^^‘1 3 3i:. [$S3-n/-cB55®f'— ? 
575-P7Waff1^(C$jftLTCRT 1 1 2St>'Xt- 
*1 1 4(C0*attJ:/]TSAVfi^SQSan 3 4i:*'e« 
FE^tl^o 

[0 10 8] ^:?80^[C[^^Bi^fbga5C®J:5^B5l!« 
Si'>X7L,(c)gffl-r5iIi:T\ ^xV77 1 1 StcfB 
nfc7'7'-? yUSfFtili^Ezi ti. 

7;l/7y 7^^S«fp®3^JjiTUJitcfctt;5®^%?gM 

[0 109] 

[5^0^®!%*] J.X±®lftB^*'60^e*'^d:3tc. :$:f|B^ 
[c«5Bg^<b»«li. 7—Siejga®i^«[bi:5®r- 

^<bgST'$oT. HuiBr-‘j!|5JMia®Jt^<b®/c46® 
migL»5Sfi£-r«^1gLSS^0E#Si:. HuiBMlgLIgC 
y l ^ gLDf 

huIB® 1 gLDj^lS^Slc J: y 
1 f5L8fc5MIBBi^JHI®ffi^«Slc2l(fr5m 1 JSft# 
buIBS 1 ti/tm 1 iL3S5ffl 

l'TB$^® buIBx - •Sf e)Mi85ifi!6-r 5 r- -S^ giSiiS 

§Br-^l£iSa5fflL'TBi^<b-r5lto3iT— ?Bf1t[b# 
buIBS 1 SL^iES file#®. buIBS 1 fSLSE«Jt 
#®. MsBx— J?ejS^4fi)6#SSy'BuiBfe)I7— ?Bg 
^fb^SW. Iffl® I CF^®0^T||iI5-n. buIBUI 
buIBI C®^gp*'e77-bXT'^^0' 
^^(cMiBm 1 SLif5«Jtrs C i: 51#^,!: -r So 
[0 110] ctUcJ:y. 7-^i5jM^®Sfi£(!:il1g|| 
ii-rsmi gLDEtt^1-g|5*'e77-trXT'$^L'Bg^{b I c 
®f^gpic«itti-ti50T'. 

BS^ii«6M7to4aSo Sfc. Bf^fb 
I c«. asp^)ifi®i5^tt55i«-rs/i:i6®*!ig»/j' 
Pfi®«ltg51f 7®7. /jMj-^HKT-Hil-rS 

So 

[0 111] CCT-. BuiBBg^fbSaiS^St::. buIBS 

1 aa^F£#©tcj: y i aiiE5Bt^<b-rs 

s 1 Bi^^b#S5fi^. buib» 1 buib i 

crt®0iST'iiii?ti. buibsi 

fg^fb^STBi^fb? n/c^ 1 SL*iE5BuiB+S#«t|{ciS 
ffl-rsi-rsci;t,T^So cntCcty. H3#«7- 
^«2ia®^fi£lcii1gg®^-rsil 1 gLliE5)EDSCi:*'T- 
$^<^s®T\ 7— j?e>Ma®ig®i4*^iiij#?n. tc 
tX9S^y>i^y<j x/xsy'5® 34^817; my XA*^fli 
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[0 1 1 2] ddT'. 

X^cDISiiyn h zuHcS^X iifltc J: 

5 C <h ^ISKE L^5 

y. MiB5g^(bgais?6ic. 0uiBti#«istcai(i-r5 
9^ \yy9'T-^m(Dm2^m^^0S.t^m2u.m^0!i 
buIB 9^+ LTBulBffl#«tl6' 

UX^KVXt-^ i: *515^2 fLiifi:*' 
-K-r5*'S6'^!|!yafr L. -a L/cH^tclulBiffl^liS 
iuib 

HtiBiSiiE*'^?tl/cJI^lCBij 
<b-r« il <!: tT-5-^o 

[0 1 1 31 cnicjcu. «SP^OtaSigiI*^fi!6iALfc 
<t ^ lciHBticiE)icDx— ns j: <b ICS 
y. ®»>ificos^tt*'!|^±?nSo cc:t\ BuiBm2 
iLDf^fi)6#®Sy'Su!BISiI#ISli. #ufB I C^i.a)@KT 

m^^nTi'S^-rscttT^So cnfCcfcUv mm 
'>XxAO$^tt(CMaLSt'ai5^. 6P-6. 
s<^4^(cit}eiaLSi,'5!iagiuiBg4^(b i cromcis 
ttens<7)7\ Bi^(bi C(7)ji«A'^^ic:^?<sse: 
<!:»SiJ^nSo 

[0 1 1 41 ZCT\ luIBBi^fbS^aii^eiC. MIBffl 

6 21 e nr ? b? 

(b-rs^^(b#©^. 

vxx-^fictia-rsm 1 »srix— jf,i;?jsm 2 »si 7 =' 
-:?<blc»86tS5^Si#S<t:. iuiBM 1 »Six— ?^Su 
IBtl#«jif(::a(rrsig22ifi#®<!:^fii^. MIBSI 
0i^fb#®(i. BulBmigLia<i:HuSBm2gL8i<i:«iSe^ 

L, buibx- 

tulBm 1 a«i:l5i3m2^jai7=^- 

L. luiBa^fb#®SO^HuIB»Si#®(S. «ljfBICF*gO 

0SST-H31? nr I' s <b f s c i t T'^ So 

[0 1151 ^/c^ SuiBBi^fbgaiiJSlc. 1512^2 
UVi2'x-^ <b LTBulBtl^atUCiSff-rS 
m2mm^mt. luiB+s^atsA'ejxenTtSBi^^b 
zirns^e^x— ji^ifi^<b-rsifi^(b#®<?:. «^(bi3r 
ns^g^x—st^ux/ifvxT— ?[c+is-rsm 1 »si 
X— jt i:^SM25JSiT-^ i:(c5^Sit-S»SI#®i:^ 
(ix. SulBiSE^Kli. HulBmi»Six— S*^ 0 uIBffi# 
ati!b'6a(s^nT?sux/K>xx-'?j t ltsuibw 
huib^ 1 guiBffi^afg 

*'S)M(15-nT$S^i' U iiMSBm 1 fl,»<b 

Sf^Bi^fbU HU 

HuIBmiSLIS<i:HulBm2» 
Slx-'J'.b^.^^-rsc.btCcby. HufBx— J(e2l«^ 
^fiXL. HulBa^^b^lSSUBuiBiJSIt^iatt. huIBI c 

f^00KT'HiI?nT b' S <t r S C <!: <t So 

[0 1 1 61 cnicj:^, «gSF^ail(^S^t4^6i«f 



I c^«ixSiii^(b^a 6 'iiii?nSo ccz\ huIbis 
2^x-^Bi^fb#ISlcJ:S0g^fb(Z)7;l/Zi''JXA(i. M 
IBS 1 < .b 1 1 o 

Ot,® <t S d i: <b r S <b f S C i: t, 

So 

[0 1 1 71 dniCcfc^J. feiMx-^Bg^(b#a<!:Sl 

^ lths 

■rSd<!: 6 ^^«gi:SSOT\ Bf^fb I CO 0 K 3 ®«*’«fJ 
i^xrnSo ddT\ tuiBISlXr— $!fli^[b#m[Ccl:S0§ 
mt<DTll:S 'JXL.it. huIBS 1 Bi^lb^lSSO'HulBa 
^fb#sob'-rn<7)t®<!:t,ss‘j. *'o. i'-rn<7)t. 

®J: tl'tfB^T'SSdi-rSd So 

[0 1 1 81 dnic<fcy. 

S46[cfg)tt ^0Bi^(b^^ ar cfc 3 o t 

t. Bg^b«^fc46tCx-^iBiSa#P^*'±i|ilc^<SoT 
L*3tl'3^M^*^0g?nSo ddX\ HulBfejSx 
— S?Bi^fb#Sli. HulBe 2 ix-^^-$g<DXP'y '7 
tcE«JU. #XP'yX(c«LTHulBT-^lia»om 

-rsgP«^ffll'T0g^1b-rs<!:-rs d i: t.7'^ So 

[0 1191 dnicj:^. T-^v-'(X(D±i^i^Bm9 
-:><08§^«[cwLTt. *0g^(bga^affl-rsd 
.bjb'^SgiiSSo ddT\ HuIBIB2lx-^0i^(b#S 
in MIBXP'y‘7<bMBx-'S!S2i^O«fS-rSg|55J<l: 
OSffteWiSaffl^<!;Sd<!:lc<fcy. HulBBi^(b=&^TS d 
(brSdttX-^So 

[0 1 2 01 dnic<fcu. fS^SiiaaiST'eiMx-^ 
0iit(b#IS^IIiI-rSd<!:6^^HgiSSo ddX\ huIB 
s 1 9%mt^$&T'<D9mtmEmmt^^T(ommtt 
in P-OS»X;l/P'iJXnT-SS<!:-rSd<!:t7-^ 

So dnicj:y. ^ 1 1 1M(D 

$»l§X'l 6 fflLTSgrSd<!;*'!^tb<bSy. Bt^(b I 
c®@KJBii*w?nSo 
[01211 dd7\ lulBS 1 fli^(b#©St>HulBa^ 
<b#isin ^itmi\ crtic«j#?n7c^x— 
THuiBHi^(bSJ/a^(b 5 ^Tb\ 7 <D^x-^KD-gP 

in MIBI Crt< 7 )VX^ROMMc^g*ft?n. ?xs- 

SPli. MiB I Crt05ilBROMMc#t»i?nTl'S<i: 
■rsd.b'bTtSo dniCcty. isiigi^^x^ROM 
o>3*Tmm Ltcm-^ictnf%,xi^t. aiBROM(7)s.7 

[0 1 2 21 dd7\ HulBaSlin ^-\'U>'>'UX.1^V 
X^tOISEXP h p;KcS-:3'<afilc<l: UffiSlCHulB^I 
¥«lil6'iEasat§7SS d t ^iSil L^3 
y. flulBfli^{bg»ii^6in HuiB5^vU>'X'x-^lc 

w LTSuiBta^ati*' e 21 e nr ^ fcBg^(b?nf;:^^ 
X— 5f^«^fbfStt^[b¥S<b. n^fbunfce^x 
-^f^ux.1^>xx-^lctisrssi »S5lx-^i5i 
SS2»Six-X<!:lc»ili-rs»Si#®<!:. SulBSlSL 
S^buIBS 1 »*lx— J:*'‘-SrrS!!)'S!b'^|iJllTLv 
-Si LfcJf^lCHulB^I^^SliiESSaST'® S (bigil 
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m^^t1EtvTz 

m^W, 2 »Slx-^ ^ UXtKVXt— 5* t LTMEfi# 
MEx—sjejn 
huI 3® 1 aiii: MBM 2 5^Six— ? <!:^ 
bu!3x — mi 
MI35^Si#SSU-'H5l3S2Bi^{b#mtt. 
0U13I Crt^O0KT-H31^nTl'«<!:-r^s:,!:t,7$ 
5o 

[0 12 3] CtUCctU. gLD(^-o/c(:>-^fiEU 

<h X - ^ a wicffiffl l 

0i^(b^aT'oatic^^0/c46©@a)ns 
t/tx Bi^fb I C0f^g|5{CteL'TigiIO 
/c46<7)iLli[^fiE<i;J±®®S^^^oTl'50T\ 
<DS^tt6':iS46etv«o 

[0 12 4] ^tc. X— Sf$ESS0tt^{bt 

^<7) X -■ ? 5 ji(i^t>' 

S[i«S*'6«RE^tx5ji[i->Xx/.T-»oT. ^nSjM 

<btT'?5o iiniccfcy. 

- ^ l5)S^<D4fiElcS]gMa-r ^SLISfli ^ T'ttJX 

SO'\ x-5!$E)M^(D^fi)6[CiIffil8 

mt^ 2 

irn/i;t.(7)T'SSiI,!;6'e^ *l^g(33/>?SBg^[b I C^ 
*'0. S^tttDSt'Bg 

[Eiscofam^m^] 
m 1 ] 2^580^(0^ 1 
i^miy—^yx ^/T^•r -So 

[02] 0 HC/Tx^+l/tm 1 cOBg^ib I C5 4CD/N-K 
■2 1 7'P -y -2 EiTS 5 „ 

[03] :$:^0^<7)m2(D||fili(7)mftHc^;5Bi^(bg*® 
toS->— b-V2(^/Tv-r0T-*i.o 

vmy-'ryx-^rntmz^th^o 
[0 5] :$imM<Df^4(omm(Dmmi,z%^B§^^tmm(D 
®a-> - 2- > X ^,xxf0T« 

[06] 0 5 [C/Txirtlfc^ 1 <0Bi^^b I C 9 4<7)/\- K 
-2 i7«fiE€-/^-r7P 'y -207*^0 

[07] 2f:f?B^lc^^Bg#<bg«(7)M«cW^)ifI->Xx 



[08] 07lc,T^^tl/i:7txVX'2 Kx'1''2'g»1 1 0 

(omi&^mty'a -y -2 0 ts 

[09] |Si3txYX2Fx'r:^'gai 1 OcDP»gaUC*g 
?ti^0KSffioffi{ti^^-r0T'S5o 

[010] 07tc.x^?n/cBSi«BSgai 1 ^<D^m^ 
^■r:^P-y20TS«o 

[0 1 1 ] n 1 

^yx^mtmT'h^o 

2->z€-,^-r0T'®5o 

m^omm 

5K7K8K91 Bl c0«[tl 
5 2. 7 2. 8 2. 9 2 m2(Dm^ 

5 3. 73. 83. 93 

5 4. 7 4. 8 4. 9 4 M 1 tOBi^'lb I C 

5 5. 75. 8 5. 9 5 S20«S®MPU 

5 6. 7 6. 8 6. 9 6 M2®Bg^'fblC 

5 9 X— 2eSaK^J3Eg|5 

6 0. 10 1 iLm^msa 

6 1.100 21-gP I /Fgp 

6 2. 1 02 
6 3 ^^g|5 

6 4. 1 03 lSE^SIS*rtg|3 

65. 66. 68. 1 04. 1 05. 1 07 X4'y 

=f- 

67. 1 06 Emm 

6 9 2JSIgP 

7 0 x-2*l5Sg|K^S$rtgP 

1 0 8 it^SP 

110 5tx-rX2 Fx'1':7'g» 

1 1 1 

121 SCSlP>hP-x 
1 2 2 *ij®g|5 

1 2 3 Bg^fb I C 

124 MPU 
1 2 5 3t^-y K 

1 30 SCS I UVhP-x 

131 MPU 

1 3 2 Bfl^^b I C 

133 MPEGxP-2' 

134 AVff^SaSgP 
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